Create a GRC indicator
Create an Indicator to monitor the controls and risks and collect evidence of performance.
Before you begin
Role required: compliance_admin or compliance_manager, risk_admin or risk_manager, audit_admin or audit_manager
Procedure
Navigate to one of the following locations:
- Policy and Compliance > Indicators > Indicators.
- Risk > Indicators > Indicators.
- Audit > Indicators > Indicators.
- Select New.
On the form, fill in the fields.
| Field | Description |
|---|---|
| Number | A unique identification number. |
| Name | Name of the indicator. |
| Template | Related indicator template. |
| Category | Category associated with the Control/Risk that is selected. This field can’t be edited. |
| Active | Option that determines whether the indicator is active. |
| Control/Risk | Related control or risk. |
| Applies to record | Profile related to the Item. |
| Owner | Owner of the indicator. |
| Owning group | The group that owns the indicator. |
| Override Template | Option to override the indicator template associated with this indicator |
| Last result passed | Option that indicates whether the controls were compliant or non-compliant. If the controls were compliant, the check box is selected. |
| Schedule | |
| Collection frequency | Collection frequency for indicator results. Indicator tasks and results are generated automatically based on the indicator schedule. |
| First run date | First collection time for indicator results.This field is automatically set based on when an indicator or an indicator template runs for the first time. The value in this field can’t be modified. |
| Next run date | Next run time to collect indicator results of all downstream indicators for this indicator template. |
| Due date duration \(days\) | Due date duration in days between the creation and due date of the indicator task and generation of its results.The due date duration added to the creation date reflects as the Due date of the indicator task. This field appears only when Manual is selected from the Type field. For more information, see Performance enhancements for Indicator nightly job. |
| Method | |
| Type | Results can be gathered manually using task assignment or automatically using basic filter conditions, Performance Analytics, or a script.- Manual: Used to create an Indicator task for an assignee to complete. - Basic: Used to designate whether the indicator identifies the passed or failed controls. - Script: Used to write a script to collect the required data. |
| Short Description | If Type is Manual, this field is present. A brief description of the issue. |
| Instructions | If Type is Manual, this field is present. Instructions for the collection of indicator results. |
| Value Mandatory | If Type is Manual, this field is present. |
| Passed/Failed | If Type is Basic, this field is present. The indicator passes or fails. |
| Script | If Type is Script, this field is present. Script that obtains the required system information. |
| Supporting Data | |
| Note: Starting with version 10.1, the actual historical data for the supporting data records from the indicator results or indicator tasks is displayed. Earlier, only the real-time state of the records collected could be viewed. | |
| Table | Use supporting data to gather supporting evidence from other applications. |
| Supporting data fields | Supporting data fields based on the selected table. |
| Criteria | Conditions that must be met for the supporting data. |
| Sample size | Number of records to select for the supporting data. |
- Select Submit.
Parent Topic:Manage GRC key risk and control indicators