Open the control and go to Implementation, Monitoring & RACI. Implementation and monitoring save together. RACI has its own save.
How it operates
Frequency suggests the next review date when you run a test. Changing the frequency does not rewrite a next review date that is already stored. Last tested, next review, and effectiveness are derived from the tests, not typed here.
- How it is implemented. The tools, processes, procedures, and artefacts that put the requirement into practice.
- Date implemented. When it became active. Leave it blank if it is still planned.
- How it is monitored. The review, metric, automated check, sample, or attestation someone else could repeat.
- Monitoring frequency. The standing cadence, such as monthly, quarterly, annual, or ad hoc. The choices are maintained in Compliance settings, on the Monitoring frequency tab.
RACI
Choose a person, a Control Management team, or type a name and press Enter. You can add more than one in the same field. Save RACI keeps the four roles.
- Accountable. Owns the outcome and sign-off, typically one role.
- Responsible. Does the day-to-day work.
- Consulted. People whose input is needed before a decision.
- Informed. People who must be told the outcome.