Test Controls
The Challenge
Control testing is a tedious, complex, error prone, time consuming and expensive for most organizations. Many simply outsource the process given an inability for a single internal resource to effectively handle the challenge objectively and efficiently due to its highly cross functional nature and the information silos involved. Done poorly, control testing leads to failed audits, increased risk of control failure and the threats that come with it including brand devaluation, fines and system failures.The Solution
Agiliance IT-GRC automates the process of testing controls and gap identification. Leveraging automated technical controls checks on one hand and automated E-Surveys for human attestation on the other hand, provides unparalleled accuracy in performing tests and the time it takes to complete them.
“Intelligent Profiling” of assets and controls allows similar assets to be tested in accordance with a common set of rules. Prioritization derived from the application of asset criticality and operational-control risk scoring allows assets that are most critical to be tested first, optimizing resources, saving time and money.
Key Features and Benefits
- E-Survey for Manual Controls enables self-assessment control testing
- External surveys of vendors and partners including survey delegation
- Secure online portal, or download as spreadsheet for completion
- Custom survey creation
- Questionnaire authoring
- Attach evidence as needed
- Survey progress tracking
- Real-time tracking for management / auditors
- Automatic problem escalation
- Automated Controls Testing down to the application and database level
- Agent-less connections to SIM/SEM, CMDB and other general computer control testing tools
- Support for standard CSI suites