Audit Management - Strategic Plan

[mohamed shibl]

Hi Dears, 
For a client who uses strategic planning, (3 - 5) years strategic plan, at which they do risk assessments on the processes of the organization, then do the priority assessment which is based on several factors. from theses assessments they can prioritize which auditable unit to be considered at which coming year & using certain frequency.
After the Strategic plan is confirmed, they perform a year by a year - if the year plan is confirmed then all the auditable units that are planned on this year will have an engagement created automatically for it.

Do we have OOB option for this situation!

NOTE: I know that the strategic planning is already existing on SPM module, but does it available on Audit management without having the SPM? 

Thank you all in advance!

[Mathew Hillyard]

Hi @mohamed shibl 

Strategic planning belongs in SPM. Audit management's lifecycle is the Audit Engagement. The only planning available is related to that engagement, so wider than GRC.

In terms of deciding who is in scope for auditing in a given period, that's possibly something you could leverage a GRC Choice for (e.g. "2026 Scope"), then perhaps relate this to a set of target records and plan the audit engagements accordingly? This would probably still require some sort of planning and design within SPM so your org has the big picture above the individual audits.

If SPM is not available then it sounds like this something you'd need to build in as part of the risk assessments, set the GRC Choice on targets based on the assessment outcomes then schedule the audit engagements appropriately.

I hope this helps!

Mat