Policy and Compliance Flashcards
What is the relationship between the sn_compliance_authority_document and sn_compliance_citation tables?
One to Many
What is the relationship between the sn_compliance_policy table and the sn_compliance_policy_statement table?
Many to Many
What is the relationship between the sn_compliance_citation and sn_compliance_policy_statement tables?
Many to Many
What is the relationship between the sn_compliance_policy_statement and sn_compliance_control tables?
One to Many
A control that is not related to a control objective is _______
a standalone control
Which Policy and Compliance tables can be nested in parent child relationships?
Policies, control objectives, and citations
The many to many relationship between control objectives and citations allows customers to _______
test once and satisfy many requirements
Which Policy and Compliance tables are optional and can’t be nested into parent child relationships?
Authority documents and controls
Which is the primary table where most of the daily compliance work occurs?
Control (sn_compliance_control)
A _____ must be related to a single _____ and an _______ can be scoped with multiple ________
control, entity, entity, controls
A control can be related to multiple ______, _________, and ______
issues, control attestations, and risks
Which table stores the many-to-many relationship between Control objectives?
sn_compliance_m2m_policy_stmt_policy_stmt
Which table stores the many-to-many relationship between Control objectives and Citations?
sn_compliance_m2m_statement_citation
Which table stores the many-to-many relationship between Control objectives and Entity types?
sn_compliance_m2m_statement_profile_type
Which table stores the many-to-many relationship between Control objectives and Indicator templates?
sn_grc_m2m_ind_temp_cont
