Create a Risk Control Matrix

Note: To expedite the initial RCM setup and to streamline the ongoing maintenance of RCM content, the RCM can also be created and maintained via the RCM Content Utility. See RCM Content Utility for additional information.

Create a Risk Control Matrix

A Risk Control Matrix can be created in the entity hierarchy for any organizational unit, process, project/event, IT application, or custom entity.

1. Access the Entity Hierarchy
   1. Select the Default GRC context from the context menu.
   2. Click the GRC Register tab.
   3. Select Entity Hierarchy from the Frameworks group.

      

2. Expand the entity where you wish to add the RCM.
3. Right-click the entity, click Add Object and select RCM.
4. Fill out the fields in the Attributes section RCM form and click Save.

The user has a choice to either a) create a blank risk matrix or b) leverage the library and import risk matrix content. The second option provides the greatest efficiency in terms of consistency and time.

Complete the Risk Control Matrix

1. Right-click the RCM you wish to edit and click Edit Attributes. .

   Note: You can also edit the RCM from the RCM page itself.

   1. Click the RCM you wish to edit from the entity hierarchy, or right-click and select View Object.

      OR

      From the Organization form, click the RCM Status Link

   2. Click Edit in the Attributes section at the top of the form..
2. Click Save to accept the changes.
3. Click _ Expand to view the Evaluation section.
4. Click Edit to complete relevant sections of the RC Matrix Evaluation information including evaluation due date, assigned evaluator, comments, evaluator, risk matrix status, review status and period ending, to the extent that you have this information

   Note: Some of this information will to be updated after the evaluation is completed.

5. Click Save.