Which two would need to happen in order for Advanced Access Controls (AAC) to automatically assign a status of “Closed” to an access incident? (Choose two.)A . The incident is resolved in Fusion Cloud and a subsequent evaluation of controls finds that the incident no longer exists.B . A global condition was added that...Continue reading
You are advising your client on design and configuration related to how access incident results will be viewed and managed. The client has provided a list of business requirements: Which three must be configured to support these requirements? (Choose three.)A . Worklist assignment Result Investigator should be set to specific users.B . Custom perspective...Continue reading
You are implementing Advanced Financial Controls and you want to identify suspect transactions where the payment amount is less than $20 USD. However, you only want the results returned to be temporary. What will you build in order to accomplish your objective?A . TemplateB . ControlC . ModelD . FilterE . Business object View...Continue reading
Which three tasks should be completed before starting the Financial Reporting Compliance implementation? (Choose three.)A . Migrate the organization’s existing risk and control matrix into Financial Reporting Compliance.B . Complete control review and assessment for one period/cycle with the actual business owners.C . Create a project plan with objectives, goals, and exit criteria.D ....Continue reading
Your client has configured separate roles for control assessor and control assessment reviewer. The control assessor has submitted his or her assessment. The control assessor realizes later that he or she has forgotten to attach a critical test evidence document to the assessment and needs to attach it now. How can this be accomplished?A...Continue reading
What would happen to an access incident in Advanced Access Controls (AAC) that has been remediated and has a status of “Closed,” but poses a conflict again during a subsequent evaluation of controls?A . The incident is deferred.B . The incident remains in “Closed” status and additional remedial action cannot be taken.C . The...Continue reading
How do you add values to a Risk Type list of values?A . Populate the Import template with the new values in the Issue Severity column on the Controls tab.B . Add the lookup codes to the GRC_RISK_TYPE Lookup Type.C . Because you cannot add new values, update one of the existing lookup codes...Continue reading
Which three steps can be performed by using the Configure Module Objects pages? (Choose three.)A . Choose display (or hide) configurable options for: results, events, consequences and treatments.B . Set “object-perspective” association.C . Create object data import templates.D . Edit the assessment activity question and guidance text for all assessment types.E . View assessment...Continue reading
A Control Manager has changed the status of an issue to “In Remediation” and has submitted it. What will be the state of the Issue if there is no issue validator, reviewer, or approver configured?A . In ReviewB . ActiveC . ReportedD . ApprovedE . In Edit View Answer Answer: C...
Select three fields that are required to create an impromptu assessment. (Choose three.)A . Due DateB . TemplateC . NameD . ReviewerE . PerspectivesF . Activity View Answer Answer: A,B,C...