Compliance-supporting processes

Question 1

what are the benefits of compliance score calculation?

Answer 1

a nuanced result, key operational insights, and enables remediation

Question 2

What is the default weight for all controls?

Answer 2

10

Question 3

How is compliance score calculated?

Answer 3

weight of compliant controls divided by weight of all controls times 100

Question 4

What actions trigger recalculation of compliance score?

Answer 4

reliant entities are added or removed, common control retired or converted to standard control, common control changes its compliance status or weighting

Question 5

What is the policy acknowledgement campaign lifecycle?

Answer 5

New, Pending acknowledgement, Closed, Canceled

Question 6

What are the enhancements to policy acknowledgement in March 2021 release?

Answer 6

frequency on policy record to autoschedule, acknowledgement tasks sent to new members added to audiences, due date can be extended for new members, and additional email notifications

Question 7

When is the audience of a policy acknowledgement campaign identified?

Answer 7

after campaign set up

Question 8

Who can set up a campaign, set schedule, and extend valid to date?

Answer 8

Policy owner, compliance user and above

Question 9

Who can identify campaign audience and add users for ongoing campaign?

Answer 9

compliance manager and above

Question 10

What happens when a policy acknowledgement campaign is pending acknowledgement?

Answer 10

instances are created for all users in the audience list, policy is presented on Employee Center with due date, and employee responses are captured

Question 11

Policy acknowledgement audience can consist of….?

Answer 11

users, groups, newly defined user filter

Question 12

What are the baseline options for a policy acknowledgement campaign audience receiving requests?

Answer 12

accept, decline, request exception

Question 13

Who can cancel a policy acknowledgement campaign?

Answer 13

compliance manager or campaign owner

Question 14

What happens when a campaign is overdue?

Answer 14

closed

Question 15

What are the 5 configuration steps for a policy acknowledgement campaign?

Answer 15

Create audience, set up campaign, set properties, respond to requests, view responses and statuus

Question 16

What is the path to create an audience for a policy acknowledgement campaign?

Answer 16

Policy and Compliance > Policy Acknowledgement > Audience

Question 17

What is the path to set up a policy acknowledgement campaign?

Answer 17

Policy and Compliance > Policy and Procedures > Policies

Question 18

What is the path to set properties of a policy acknowledgement campaign and what role is required?

Answer 18

Policy and Compliance > Administration > Properties. compliance admin

Question 19

Where can Policy acknowledgement campaign audience members complete acknowledgement requests?

Answer 19

Now Platform or Service Portal

Question 20

What is the path to view campaign responses and statuses and what role is required?

Answer 20

Policy and Compliance > Policy Acknowledgement > Overview. compliance reader

Question 21

Policy table extends from the ________ table

Answer 21

Document

Question 22

Acknowledgement campaign extends from the ______ table

Answer 22

Task

Question 23

What is the compliance case workflow?

Answer 23

Report case, triage and investigate, resolve, post case review, close

Question 24

Where can a user go to create a policy exception request?

Answer 24

Employee center, compliance workspace, policy exceptions module, control objective record, issue record

Question 25

What roles are required to request a policy exception?

Answer 25

sn_grc.business_user or sn_grc.business_user_lite

Question 26

A policy exception cannot be approved if the control objective ....?

Answer 26

is without controls or only has controls in draft or retired state

Question 27

What are the Approval options for a policy exception?

Answer 27

Approve, reject, one-time extension

Question 28

What is the associated flow for verification of a policy exception?

Answer 28

Generate initial approvals for policy exception

Question 29

What is the associated flow for approval of a policy exception?

Answer 29

Generate final approvals for policy exception

Question 30

What sets the substate to awaiting approvals if there are verification rules for an exception?

Answer 30

the Set Policy Exception Substate business rule

Question 31

exceptions submitted via ___________ are based on a _________ and bypass the __________process

Answer 31

service portal or employee center, record producer, verification

Question 32

What will the final approvals flow do when there is no approval rule?

Answer 32

run a script that obtains the impacted control owners and sets them as approvers

Question 33

What is the policy exception record lifecycle?

Answer 33

New > Analyze > Review > Awaiting Approval > Approved > Closed