Add and Manage Objectives

Within the Risk Control Matrix, you can add and manage objectives that support management's overall objective with respect to the effectiveness of internal controls over financial reporting, operational risks and controls or other types of risks and controls. You start by creating a list of objectives, completing the objective evaluation, and then adding risks and controls to the objectives.

1. Access the Entity Hierarchy
   1. Select the Default GRC context from the context menu.
   2. Click the GRC Register tab.
   3. Select Entity Hierarchy from the Frameworks group.

      

2. Add Objectives
   1. Right click on the RCM where you wish to add the object, click Add Object and select Objective.

      OR

   2. Double-click the RCM you wish to view or right-click and select View Object. The RCM page will appear in the window on the right-hand side of the screen.
   3. Click Add in the Objectives section to link objectives to this process through in-line editing or click Add to open the Objective form in a separate window.

      Note: See In Line Editing for additional information.

      In-line View

      

      Objective Form

      

   4. Select an objective from the drop-down list.
   5. Enter a description.
   6. Select a COSO Objective from the drop-down list.
   7. Click Save to add the objective.

      Notes: Administrators can configure fields in the Objective form to update a field based on a specific value of another field or fields. See Configure a Calculated Field for details. Once the objective as been submitted, the Objective Evaluation section can be completed.

3. Complete the Objective Evaluation via in line editing

   Note: It is likely that your final objective evaluation will occur at a later date than when the objective was created.

   1. Double-click the RCM for the entity, or right-click and select View Object.
   2. Scroll to the Objectives section and click Edit next to the name of the Objective you wish to evaluate.

      Note: Click Edit All to place all listed objectives in edit mode at the same time.

      

   3. Select the objective evaluation from the drop-down list.
   4. Select the evaluation period from the drop-down list.
   5. Update any additional information that is displayed as necessary.
   6. Click Save.

      Note: Click Save All if the Edit All functionality was utilized.

4. Complete the Objective Evaluation via the Objective Evaluation Form
   1. Expand the Objectives folder in the RCM for the selected entity.
   2. Double-click the objective you wish to edit, or right-click and select View Object.

      Note: You can also access the objective from the RCM form.

      1. Double-click the RCM or right-click and and select View Object.
      2. Click the name of the objective you wish to evaluate from the objective list.

      

   3. Click Edit in the Evaluation section.
   4. Click Select User or Select User Group to enter the name of the evaluator. There are three options to assist in locating the evaluator name:
      • Enter text that contains the name, email address or network ID of the user you wish to select and click Execute or click Show All.

        Note: A list of users containing, (not equaling), the entered text will display in the search results.

      • Click the name of the user or click Select No User to indicate the user is not required.
   5. Select an Evaluation from the drop-down list.
   6. Enter your comments.
   7. Select an evaluation status from the drop-down list.
   8. Select an evaluation period from the drop-down list.
   9. Click Save.

   Note: The last modified by and on date are automatically updated.

5. Link Existing Risks and Controls to Objectives
   1. Right-click on the risk that you wish to link from the entity hierarchy, click Link Object and select Risk or Control depending on which object you wish to link.

      Note: You can also link risks and controls from the Objective form.

      1. Double-click the objective or right-click and select View Object. The Objective form will appear in the window on the right-hand side of the screen.
      2. Click Link in the Risk or Controls section, depending on which object type you wish to link.
   2. Mark the checkboxes next to the risks or controls you wish to link from the list, depending on the object you selected.

      Note: Click Edit Search and utilize the list search functionality to modify your selection and focus your results. Utilize List Searches for more information.

   3. Click Save.
6. Add New Risks and Controls to Objectives

   New risks and/or controls can be linked to a given objective.

   1. Right-click on the objective where you wish to link a new object, click Add Object and select Risk or Control depending on which object you wish to add.

      Note: You can also add risks and controls from the Objective form.

      1. Double-click the objective or right-click and select View Object. The Objective form will appear in the window on the right-hand side of the screen.
      2. Click Add in the Objective or Controls section, depending on which object type you wish to add.
   2. Fill out the object form and click Save. The new object will be added to the RCM and linked to the objective.

   Note: See Add and Manage Risks and Add and Manage Controls for more information on filling out the forms for the specific objects.

7. Objective Quick Reports

   See Quick Reports for additional information on generating, adding, editing and deleting Objective Quick Reports.

   Note: The objective quick report link must be configured to display. For information on adding the Quick Report link to the form, see Configure a form.

Note: Administrators can configure fields in the Objective form to update a field based on a specific value of another field or fields. See Configure a Calculated Field for details.