The internal auditor advised the Control Owner of North America to perform assessment for two P2P controls. Which three steps can the Control Owner perform to kick-off assessments for only those two controls? (Choose three.)
You are working with the customer to gather Risk-Control data for the data import process. The customer has information in multiple formats. Which format should be used for importing the data?
During implementation, you created a risk object and successfully mapped it to a control object. The client's Risk Owner is able to access the risk but not the control. Why did this happen?
A user has created and submitted a new control and the state of the control is "In Review." The user expected that the control state would change to "Approved." Why is the control not in the "Approved" state?
Which two would need to happen in order for Advanced Access Controls (AAC) to automatically assign a status of "Closed" to an access incident? (Choose two.)