Managing Your Audit Function - Governance, Risk, and Compliance Topic for Oracle Applications - page 216

If the Assessment Action includes a Certify action, you can select from the following
certification options:

• I agree with this statement : The information in the assessment is accurate
• I agree with this statement with the noted exception : The information in the
assessment is accurate with noted exceptions
• I do not agree with this statement : The information in the assessment is
not accurate
• No opinion : You either choose to make a statement or not make a statement
regarding the assessment

If the Assessment Action includes a Documentation Update action, you can select
from the following certification options:

• Complete : The required documentation is complete
• No action : The documentation is sufficient and no additional action
is required

Managing issues
Issues are defects or deficiencies that are detected for controls or any other GRC
component. Issues can be created against a control on GRC component such as
business process during the assessment or audit. Issues can be created by auditors,
process owners, control owners, or other users assigned as Delegates in the GRC
Manager Security setup for the control or GRC component. Issue lifecycle in GRC
Manager is as follows:

No

Create Issue
Against a
Component

Yes

No

Issue Requires
Remediation?

Component Owner
Notified of Issue

Close Issue

Valid Issue?

Yes

No

Create
Remediation Plan
and Remediation
Tasks

Delegates
Address
Remediation Plan
and Tasks

Yes

Remediation
Complete?