GRC continuous monitoring

Continuous monitoring involves activities related to identifying and creating key risk and controls indicators. Supporting information can be collected for those indicators through automatic data collection or manual tasks. Indicator results are then used to create issues for controls, update risk scores, and provide supporting information for audit activities and control testing.

Indicators

Indicators collect data to monitor controls and risks, and collect audit evidence. Indicators monitor a single control or risk.

Indicator templates

Indicator templates allow the creation of multiple indicators for similar controls or risks.