Audit Management - Strategic Plan
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-24-2025 01:08 AM
Hi Dears,
For a client who uses strategic planning, (3 - 5) years strategic plan, at which they do risk assessments on the processes of the organization, then do the priority assessment which is based on several factors. from theses assessments they can prioritize which auditable unit to be considered at which coming year & using certain frequency.
After the Strategic plan is confirmed, they perform a year by a year - if the year plan is confirmed then all the auditable units that are planned on this year will have an engagement created automatically for it.
Do we have OOB option for this situation!
NOTE: I know that the strategic planning is already existing on SPM module, but does it available on Audit management without having the SPM?
Thank you all in advance!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-26-2025 02:07 PM
Strategic planning belongs in SPM. Audit management's lifecycle is the Audit Engagement. The only planning available is related to that engagement, so wider than GRC.
In terms of deciding who is in scope for auditing in a given period, that's possibly something you could leverage a GRC Choice for (e.g. "2026 Scope"), then perhaps relate this to a set of target records and plan the audit engagements accordingly? This would probably still require some sort of planning and design within SPM so your org has the big picture above the individual audits.
If SPM is not available then it sounds like this something you'd need to build in as part of the risk assessments, set the GRC Choice on targets based on the assessment outcomes then schedule the audit engagements appropriately.
I hope this helps!
Mat
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Tuesday
Hi @Mathew Hillyard
Firstly, thank you for your reply!
You are totally right - the client doesn't have SPM then I have designed a custom solution and the project was closed.
For the SPM point, currently I am working on another project with a client who has the SPM and I am working on creating Strategic Planning (Assurance, Initiatives, Improvements) using SPM.
Thanks again for your reply.
