Managing Your Testing Phase: Management Testing and Certifying Controls - Governance, Risk, and Compliance Topic for Oracle Applications - page 195

When you initiate an assessment, you select an active assessment plan and
choose the assessment activities that will be performed. If a survey template
is associated with assessment activity, a survey is initiated. You can schedule
an assessment's due date and modify the delegates that have been assigned
to the assessment activities during the creation of the assessment plan. You
can also review and override individual objects from the assessment plan
selection criteria.
When initiating an assessment, consider the following:
° Which assessment plan will be used for this assessment? The
assessment plan contains the criteria for the assessment activities
that are associated with the assessment template.
° What activities need to be performed? For example, will this be an
audit test or an operating assessment?
° What selection criteria are needed for this assessment? The
assessment administrator who initiates the assessment can refine
the plan selection criteria.
° What components will be assessed? The components that you
can choose from are based on the information model's primary
component and are filtered depending on the application module.
° What delegates are required? If the activity is of type Survey, the
owner is the component owner, not the assessor.
Initiating an ad-hoc assessment
As part of managing objects such as risks, controls, and GRC components, you
can create ad-hoc assessments. Depending on the object you are creating, you can
perform some or all of the following assessment activities:
• Operational assessment : Enables the reviewer to determine if the object is
operating effectively and as designed. It answers the question: "Is the object
operating effectively and as designed?"
• Certiication : Certification is part of the assessment process. All resources that
have an active role in the accuracy of the assessment are typically required
to provide an answer to the certification statement and provide supportive
comments to their answer. It answers the question: "Is the information in this
assessment accurate and complete to the best of my knowledge?"
• Design review : Enables the reviewer to determine if the object is designed
effectively and meets the objectives. It answers the question: "Is the object
designed effectively and does it meet the objectives?"