Control frequency

[Carlos58]

I understand that when entering an individual control the Control Frequency field represents how often the control needs to be attested. If that's the case, then where do you document how frequent the control needs to be executed? I think it is very important to document the frequency of execution of the control, so that then it could be tested accordingly. How do you document control execution frequency?

Thanks for your feedback on this subject.

[Community Alums]

Hi @Carlos58 ,

•  If you define the 'Attestation frequency' on the Profile level, this will run the schedule job 'Control attestation nightly run' for ALL Controls under this profile. 
  
  
• However, if you wanted Controls to have an attestation frequency at different times, (example, one weekly and another monthly), you can define this in the 'Frequency' field in Controls individually (executed by same scheduled job 'Control attestation nightly run').

Please note: 
You will have to ensure that in the scheduled job script, you have defined either the Profile Table and field or Control Table and field to be used in the execution.

[Carlos58]

Thanks for your advise. I might be confused on the difference between Control Attestation frequency, and the actual frequency a control is executed. I understand the attestation is when the Control Owner completes the attestation form assuring that the control is implemented and effective, etc.  My question is not related to attestation but more simpler. Where do you document how often the control is executed. Ex. If we have a control where one person reviews the financial reports created by other person. This review occurs once a week. So the frequency of how often is the control executed (in this case the review) is every week; however, the attestation could be done every 6 months. So my question is where do you document the control execution frequency? (not the attestation). 

Thanks for your help,

[PrudeAnurag]

Hello @Carlos58,

I think the scenario presented by you fits with having an indicator in place. They can have their own frequency. This is mainly used for the continuous compliance check[Control testing]. Evidence can be attached and can be reviewed in the same flow unless you are thinking of two processes where one can be open for an individual to secure the evidence on a daily basis, and another individual performs the checks on a weekly. In this case, you will need two indicators for that Control. Using Indicators over attestation is always better as it gives much flexibility over reporting and BAU activities. 

Regards,

Anurag Tiwari

[AmeetPatra1]

What is profile table here?