GRC profile scoping The Scoping module contains profiles and profile types for use in all GRC-related applications. They can be created for any record on any table. The GRC: Profile plugin contains the Scoping module and is not visible to customers and requires activation of the Policy and Compliance Management plugin, the Risk Management plugin, or the Audit Management plugin. Only one profile can exist for a record. That profile, however, can belong to many profile types. Profile types and profiles are used differently depending on the application: Risk managers use profile types and profiles to monitor risk exposure and perform risk assessments. Policy and compliance managers use profile types and profiles to create a system of internal controls and monitor compliance. Profiles Profiles are the records that aggregate GRC information related to a specific item. Each profile is associated with a single record from any table in the application. Profiles cannot be created for items that do not have a record in a table in the platform. Profile ClassesProfile classes allow GRC managers to separate profiles for better distinction. For example, Business Service Profiles, Department Profiles, Business Unit Profiles, and the like. Profile Types Profiles types are dynamic categories containing one or more profiles. Business logic automates the process of creating and categorizing any profiles in the system that meet the profile type conditions. Profile types are assigned to policy statements, which generate controls for every profile listed in the profile type. Create and edit a profile typeAdministrators or managers in any of the GRC-related applications, create profiles types from which profiles are generated. Generate a profile from a profile typeProfiles are generated automatically from profile types in any of the GRC-related applications. Deactivate a profileWhen a profile is deactivated, all the controls related to that profile are retired, and the indicators and test plans associated to those controls are marked in-active.Reactivate a profileWhen a profile is reactivated, associated controls and risks return to the draft state and the indicators and test plans return to active. Create a profile classGRC managers create profile classes representing the types of things that will be part of the dependency model. Reports can be filtered to define relationships between the different profile classes. A profile class defines what a profile actually is. It differs from a profile type (for example, Business Services and Critical Business Services), in that a profile can belong to many profile types but a profile can have only one profile class (for example, Business Service).Relate profiles to each otherCreate relationships between profiles to build out the dependency map and better understand how risks affect each other and how they affect the enterprise.Set a profile's classSet the profile class for a profile to relate the profile to others.Assign profiles to classesGRC managers assign profiles to classes for the filtering of reports and to define relationships between the different classes of business services.Add profiles to an engagement scopeAudit managers define which profiles will be involved in the audit engagement.