Components

Roles and accountability for compliance: 3 lines of defense

Plan of Approach

Pieces of the puzzle

Control Documentation Sheet

What it looks like per control

.

• When a test is due the tester is notified per mail with a link to a landing page “My dashboard”
  
• In My Dashboard (s)he sees how many tests and/or assessments are assigned and the status
  
• (S)he clicks on a test/assessment and can see the above information
• Follow the instructions ending with a statement ‘effective’ or ‘not effective’. 
• Then the control is closed (green) or goes to the next step (create issue (orange), not effective (red))
• An overview with a status of the controls, red flag indicators and issues can be retrieved