InFission utilizes the survey and assessment tools in Oracle GRC Manager to perform all management testing of internal controls. The GRC Survey tool is used to assist the internal audit team to determine the scope of an independent audit plan. The GRC Assessment tool is used to obtain the evidence of key controls over financial statements to comply with Sarbanes-Oxley Act. The assessment tool in GRC Manager also enables business process owners and management reviewers to assess the validity and effectiveness of controls that mitigate enterprise risks under the ERM framework established by management.
The audit team uses the survey tool in GRC manager to assist in gathering the evidence of controls to help build an effective audit plan. Surveys are created from survey templates. Surveys include the following components:
A set of users (called Responders) who must respond to the survey