Which controls can user A manage for the following Control Manager role Configuration? See details of perspective trees and control-perspective association below.
Your client has asked you to define a transaction model to identify duplicate invoices based on Invoice Numbers and Invoice Amounts.
Which two standard filters can be combined to accomplish this? (Choose two.)
Which three are true about implementing a best practice solution for Financial Reporting Compliance? (Choose three.)
At the last step of initiating assessments, the assessment manager sees who the assessment participants are (to complete, review, and approve the assessments). If the assessment manager wants to change the participant, who completes the assessment, what should he or she do?
The control manager needs to associate an existing test plan to an additional assessment type, Audit Test. The existing test plan is associated only with the Design Review assessment type.
How can this be accomplished?
When you view or edit a transaction incident, you may see extra columns that are not present in the business objects used in the control.
What three kinds of control logic or conditions can cause this? (Choose three.)
During an assessment, an issue was created. Your job as the Issue Manager is to review the issues and validate them. If it is determined that they are not valid issues, you need to close them. You have found an issue that is not valid and with Status: Open and State: Reported.
Identify the correct step to close this issue.
Which part of the security structure cannot be created or viewed from the Security Console, when configuring security for Financial Reporting Compliance?
You have built a transaction model to identify possible duplicate charges between invoicing and expense credit cards. The model logic already includes two standard filters that identify amounts and suppliers that are the same or similar, as shown:
Which additional date filter will further refine the set of duplicate charges found?
A Control Manager has changed the status of an issue to “In Remediation” and has submitted it.
What will be the state of the Issue if there is no issue validator, reviewer, or approver configured?
Which filter can be used to identify expense reports that contain suspicious expense type combinations, such as, a report for a single trip that contains taxi, car rental, and mileage expenses?
Your client has subscribed to Financial Reporting Compliance and would like to address risks using treatment plans.
Which option shows the settings that will help in achieving this configuration?
Which two filters must be combined to identify different suppliers who use the same taxpayer ID? (Choose two.)
You are gathering requirements on how your client performs control assessments. Which three tasks should you complete to set up assessments in Financial Reporting Compliance? (Choose three.)
You are validating your customer’s import template before import. The customer requires that all controls be set up so they are noted to be used for the Audit Test assessment type. How do you verify that this has been done?
The GRC Business owner responsible for reviewing and investigating access incidents related to the “Order to Cash” perspective does not see any worklists for the generated results. You have validated that:
1. Other business owners are able to view their assigned worklists without any problem
2. Incidents have been generated for the controls related to Order to Cash
3. The business owner’s assigned roles contain the correct functional privileges and data access to the correct perspective values
What is the reason the business owner cannot see any worklists for the generated incidents?
Identify the four statuses and states in which you can edit an issue’s description, assuming you have the necessary privileges to edit the issue. (Choose four.)
You have defined an initial Perspective Hierarchy for your client in the Advanced Controls module. After refining their business requirements, your client wants to expand the existing hierarchy to include 150 perspective items in various levels. For efficient processing, you decide to use the GRC data migration feature to import the new items.
Which three are valid processing steps required to define the export file? (Choose three.)
You need to schedule the report “Access Violations by User.” Which two steps do you take to create the saved parameters for the report schedule? (Choose two.)
Your customer has a requirement to define an IT Compliance Manager job role with privileges to manage risks and controls, and the issues related to the risks and controls.
What are the duty roles that must be included in this job role to achieve this requirement?
You are implementing Advanced Access Controls and there is a requirement for a control to monitor user access to specific, client-defined access points which give users the ability to both initiate a purchase order and approve payments on that purchase order.
Which is a valid option to implement the control?
Which two would need to happen in order for Advanced Access Controls (AAC) to automatically assign a status of “Closed” to an access incident? (Choose two.)