Setup checklist for the GRC Audit Management application
This checklist includes the setup tasks that you're required to complete in your ServiceNow AI Platform® instance. When you have completed these tasks, the base system is ready for operation. Optional setup procedures are also included to enhance the Audit Management functionality.
Before you begin
Role required: admin
Consider creating and printing a PDF of this checklist topic. You can then check off tasks as you complete them.
To generate a PDF of this topic, select the download icon at the top of the topic, and then select Save as PDF.
Procedure
Select the Selected topic.
| Item | Description |
|---|---|
| As an audit administrator or audit manager, create engagements to manage audit information and include entities, controls, and control tests that are relevant to the audit. For details, see Create an engagement. | |
| As an audit administrator or audit manager, after you have created engagements, define which entities are scoped in the audit engagement. For details, see Add entities to an engagement scope. | |
| After defining a control, audit managers create control tests that run periodically and provide documented evidence of whether the associated control is operating correctly. For details, see Create a control test from an engagement. You can also generate control tests automatically. For details, see Automatically generate control tests from an engagement | |
| After defining a control, audit managers create activities that explore and provide documented evidence of whether the associated control is operating correctly. For details, see Create an audit task activity. | |
| After defining a control, audit managers create interviews with control owners to discuss and provide documented evidence of whether the associated control is operating correctly. For details, see Create an interview | |
| After defining a control, audit managers create walkthroughs that will be conducted to observe and provide documented evidence of whether the associated control is operating correctly. For details, see Create a walkthrough. | |
| As an audit manager, generate an audit report that summarizes the findings of an engagement so report findings can be communicated to executives. For details, see Generate an audit report from an engagement |