Self-Assessment using eSurvey capability
Streamlining Risk Assessment and Control Self-Assessment
Regulators are asking organizations to increase the number and the scope of assessments to measure risk for their critical assets. Management would like to shift some of the responsibility and liability of assessment findings to individual asset owners. These assets typically include digital assets like servers, business applications and network devices. They can also include non-digital assets like people, processes and infrastructure.
The Problem
Traditional assessment processes cannot scale effectively and are hard to manage. Analysts are burdened with not only collecting data manually, but having to analyze and report on it as well. This ends up being a slow and complex process due to:- Inability to track the actual asset owners and their delegated teams
- Reliance on email, spreadsheets, paper and personal interviews with no tracking of changes to information
- Manual tracking of the workflow, and manual collection and analysis of the results
- Working across multiple locations, time zones, business units, and geographies
- Inability to make the asset owners responsible for the correctness of supplied information
The Solution
Agiliance IT-GRC 3.0 provides a systematic web-based self-assessment process that transcends the problems of time zones and individual schedules by creating a browser-based interface for assessment responders to log-in and complete their assigned surveys while also collaborating with internal auditors, risk analysts and other technical staff. Responders can forward and delegate the entire survey or individual questions from the surveys to other users and teams. The Agiliance product provides:
- Interactive web-based self-assessment surveys with built-in help
- End-to-end set of tools for building and managing self-assessment surveys
- Built-in workflow including delegation, escalation and reminders
- Ability to assign risk measures to questions and determine criticality
- Highly customizable survey layout and survey content including custom guidance and help
- Easy to use advanced models for risk scoring
- Ability to add one or more attachments as evidences
Benefits
- Gain freedom from coordinating schedules across multiple time zones with the convenience of a browser-based self-service model
- Business and security owners of assets are automatically presented a web-based making the process very efficient
- Risk and compliance scores are updated as the survey questions are answered
- Reduce the time and effort needed to complete complex assessments and audits
- Ability to streamline external stakeholder assessments such as vendor and partners risk assessments by creating “outside the firewall” safe web access to eSurvey questionnaires
- Part of a rich application with roles-based dashboard and reporting capability