Database Reference
In-Depth Information
While a control is being evaluated, you can stop the evaluation. In order to do so,
select Actions | Cancel Analysis , or click on the Cancel Analysis button. Assigning
incidents owners (participants).
You can assign the incidents generated by the evaluation of TCG controls to business
process owners and control owners using the participant assignment function. The
participants are responsible for accepting the risk or implementing corrective actions
for each incident generated from the evaluation of transaction controls where the
record of a transaction exceeds the risk defined by a control.
A participant with access to GRCC can view assigned incidents by navigating to
Manage Incidents home page which presents incidents belonging to the person
who is currently logged on to GRCC. Incidents will belong to a user that generated
the incident until the incidents are assigned to the participant. From the Manage
Incidents home page, you can navigate to other pages, which show an Incidents
dashboard or detailed records of individual incidents.
The GRCC Manage Incidents pages enable you to review incident details, and to
set the status of incidents to reflect whether anything should be, or has been, done
about them.
Initially, incidents appear in the Manage Incidents homepage at an Assigned status,
which means that you (potentially along with others) have been designated to
address them. You can update an Assigned incident to any of the following statuses:
Accepted : It means you have determined that nothing needs be done to
resolve the incident
Remediate : It means you have decided that some action must be taken in
the business management application to resolve the incident
Resolved : It means you have confirmed that the remedial action has been
carried out in the business management application
Implementing corrections
The participant responsible for the incident will implement the corrective action,
as required, outside of TCG. For example, you may determine that a purchase
order should be canceled if a transaction control shows that it is suspect; that action
would be completed in the business management application to which it applies.
 
Search WWH ::




Custom Search