Auditable Units

[Rajeesh Raj1]

What is the concept behind Auditable Units in Audit Management? I am trying to create one, and when I try to add records under the 'Business Units,' 'Department', etc., the records available are the actual records from Business Unit and Department tables. I was expecting the entities for type business units or departments.

Why are we adding actual records instead of entities into the Auditable Unit?

Does the risk score populated at the assessment roll up to the entity?

What happens after the assessment?

Thanks

[Community Alums]

Hi @Rajeesh Raj1 ,

An Organization Creates Auditable units with entities such as business units,departments, vendors,products, Business processes , Business Applications, locations, Authority Documents and Policies to perform  RISK ASSESSMENTS .

After RISK ASSESSMENTS ae performed , based on risk ratings , the audit managers can decide if they want to audit the entities . They can scope an auditable unit as an entity on an engagement.

[Community Alums]

Hi @Rajeesh Raj1 ,

[rajeeshraj]

After the risk assessment on the Auditable unit, does the auditor manually add the required entities to the engagement?

When an Auditable unit is added to the engagement, is there a way to automatically add the corresponding entities?