FAQ

FAQ

Q1: What business challenges does the GRC for Jira plugin address?

A1: The GRC for Jira plugin is designed to help organizations streamline their governance, risk, and compliance (GRC) processes. It addresses challenges such as ensuring consistent compliance across entities, efficiently designing and testing controls, managing deficiencies, and conducting thorough audits. By automating and structuring these processes, businesses can ensure they are compliant with various regulations and standards while minimizing risks.

Q2: How can the GRC for Jira plugin enhance our compliance management?

A2: The plugin provides an interconnected framework for managing various GRC issue types, from broad Authority Documents to specific Control Templates. This structure ensures that all compliance requirements are systematically addressed and tracked. Moreover, the plugin's dashboard offers insights into Control Test Execution performance, allowing compliance officers to identify bottlenecks and areas of concern.

Q3: Can the GRC for Jira plugin automate any of our GRC processes?

A3: Yes, the plugin offers automation in several areas:

  1. Control Design, Attestation and Test Execution Lifecycle: Typical GRC processes are implemented using specific issue types, workflows, validations and automation.

  2. Attestation Creation: When a Control is transitioned from DRAFT status to ATTESTATION, an Attestation Test Execution is automatically generated.

  3. Monitoring Test Executions Creation: Test Executions are automatically created for Control according to its testing frequency and automation configuration.

  4. Audit Scoping & Management: Facilitates scoping of Audit activities and generates a visual representation of the entire GRC landscape around audited Entities.

Q4: How does the GRC for Jira plugin support our audit processes?

A4: The plugin introduces a specialized Audit issue type that assists Compliance Officers in gaining insights into past GRC activities. This includes viewing Attestations, Monitoring Test Executions, and managing open and resolved Control Deficiencies. The Audit UI provides a detailed view of GRC performance, enabling auditors to identify trends, issues, and areas of non-compliance.

Q5: We have diverse entities and assets. Can the GRC for Jira plugin handle this complexity?

A5: Absolutely. The plugin allows you to manage a wide range of organizational assets, from data centers and servers to applications, services, and departments. Each entity can have its unique set of controls, testing schedules, and deficiencies, all managed within the plugin's framework.