Skip to main content

Get help for ARIS Risk and Compliance

Execute controls

As soon as control executions are generated and the execution period was reached, the control executor roles responsible can view the control executions in My tasks or in My GRC tasks in ARIS. By default, control executions are opened in My GRC tasks in ARIS. For detailed information, refer to Perform or review control executions the online help of ARIS. How to edit control executions in ARIS Risk and Compliance is described below. You can Hand over object hand over or Delegate object delegate objects to another role.

Prerequisite

You have the Control executor role.

Procedure. Procedure

  1. Open the list of control executions.

    1. Click Home Home > My tasks. Your tasks are displayed. Initially, tasks with the Open status are displayed.

    2. Filter the list with the Control executions object type.

    3. Check the due date. To do so, sort the list in Sort ascending ascending or Sort descending descending order by clicking the column header.

    4. Click the name of the control execution you want to edit. The form containing activities, further documents, and so on is displayed.

  2. Edit the mandatory fields (Mandatory field, Recommended field) and the optional fields.

  3. Save your entries and select the status.

    1. Click Save Save. Your entries are saved. The status is automatically set to In progress. If you want to continue later, keep this status.

    2. If you want to complete control execution editing, select the status Completed or Not possible depending on the result, and enter an explanation of why processing is not possible. If the status Not possible was selected, the Remark field becomes a mandatory field.

    3. If you changed the status, save your entries again (Save).

Your entries are saved. If you saved the status Completed or Not possible, you can no longer edit the control execution.

If the control executions are not edited within the predefined period, they receive the due status Overdue when checked. Control executions with this status can be edited.

By default, control executions with documentation status Completed or Not possible require a review. Administrators can configure in the Risk and Compliance configuration of ARIS Administration (Configuration Configuration > Risk and Compliance > SYSTEM CONFIGURATION > Workflow management > Configuration > Task reviews > Control test) whether and how many reviews are required. If reviews are required, review tasks are generated for the reviewers responsible in My GRC tasks in ARIS.