Audit Workspace - can I audit without entities?

[jennifertate]

I am transitioning from fully manual internal audits using Word docs and Excel spreadsheets to the eventual use of ServiceNow's GRC Audit Workspace (and Compliance, Vendor Management, and Risk).

I have taken training, but I am not fully understanding how to build out the audits. How can I go about using this workspace before we have all entities and control objectives in the system? Is this possible?

[Community Alums]

Hi @jennifertate ,

The Answer is NO!!

In Audit Engagement Space, you need to do scoping which includes associating Entities as the first step.

Unlike Control Objectives or Risk Statements, in Audit management doesn't require a Entity Type but a "Entity" itself.

An Audit engagement is scoped with Auditable Units or Entities. So Entities are very important.

Also, these are steps to be followed to understand Audit management:

[Community Alums]

Hi @jennifertate ,