GRC PC 3.0 - Referenced Controls

[Former Member]

Hi Everyone.

I have some doubts about referenced controls in PC 3.0 and how to manage them.

I have the following situation:

In one Subprocess (supose any subprocess from Procure to pay) I have several control objectives with their associated risks and his controls.

CO.P2P.1 -> RI.P2P.1 - CA.P2P.1

Then, in another subprocess like GL I have some control objectives and risk that were covered with P2P controls.

CO.GL.1 -> RI.GL.1 -> See control CA.P2P.1 in P2P

I try to use "Allow Referencing" in control CA.P2P.1 in P2P Subprocess but then I can't assign it in GL subprocess.

Should I assign both control objectives to control CA.P2P.1 or use "Allow Referencing" checkbox?

How can I manage them?

Thanks in advance!!

Matias

[Former Member · Accepted solution]

Hi Matias,

we work at a similar Problem in SAP GRC PC 10.0 in RampUp.

Us was told, that there it a option to create a custom defined field, which can store the referenced control.

My be this Information helps you.

Regards,

Harald Klugel

[Former Member · Accepted solution]

Hi Harald! Thanks for your answer.

The problem is that I found a pdf of Master Data in PC2.5 and it describes how to use this functionality.

But in 3.0 when I set on the "Allow Referencing" flag nothing happens. I don't know how to assign this kind of control to another subprocess with other risks.

Thanks in advance