Overview of the Control Object

A control documents measures your company takes to address a risk. It describes actions taken externally to Oracle Risk Management Cloud Service, either automatically in other systems or manually.

Any number of controls may apply to a given risk; they're associated with the risk when the risk is created or edited. The controls may be given stratification values, which define the role each plays in dealing with the risk. Although stratification occurs as you configure a risk, you should bear in mind the role a control is to play as you create the control.

For each control, you can create test plans. These document steps to be followed in determining whether the control is effective. Users execute a test plan while completing an assessment of the control that the plan is created for. A control may have multiple test plans, but no more than one per assessment activity type.

To work with controls, select Risk Management > Controls. Then select a tab:

• Worklists displays your control-related worklist assignments.
• Controls opens a page listing the controls you're authorized for. In that list, click the name of a control to open its record. An individual control record includes tabs to view its definition, its test plans, assessments of it, issues raised against it, and related advanced controls.
• Assessments opens a page listing control assessments for you to complete, review, or approve.