GRC PC 3.0 Process Mapping

[Former Member]

Good day

On GRC PC 3.0, How would one document all the processes and controls for a particular PROCESS within a business, example, Procure to Pay.

I have 8 steps for the Procure to Pay process, with a control at each step. Should the audit division or business want to look at the Procure to Pay process and analyze each step and control, how does one go about documenting or creating this process

Is a matrix or documentation center on GRC PC 3.0 where this could be defined

Is this done from within the Global Compliance Office and then create a Procure to Pay process with all the steps highlighted within the global process

Can each step be documented in a workflow,example, Step 1, Perform Period End close, Step 2, Analyze and reconcile Procure to Pay GL Accounts etc.

Rgds

[former_member192417 · Accepted solution]

Hi Micheal

in GRC PC controls are attached to subprocess level and the subprocesses are assigned to the process.You could have all the process->subprocess and control structure for P2P ,reviewed by business and document the structure in an excel sheet.

Then create the same structure under the global compliance ->process hierarchy by uploading them in GRC-PC application.You also have attachment option within each process,subprocess and control,so that you can maintain the documentation of each category within the application itself.

You can then use the required global process/subp/control by reference or copy in your own compliance area.

There are some predelivered automated control for P2P process within PC 3.0 application, you can use them or can create of your own to perform automatic steps though those controls assign to each process. You can refer the predelivered automated controls for different process areas from the following link.

[original link is broken]

Thanks

Debraj Roy