One control record
Stop copying the same safeguard into every register
A control may support several risks, obligations or assurance activities. Copying its description into each register creates conflicting owners, evidence and effectiveness results.
The platform uses reusable control records that can be related to the risks and obligations they address. Control catalogs are templates and are not chargeable items.
- Reusable control catalogs
- Linked records
- Owner and evidence
- No template charge
From gap to closure
Keep the reason for the action visible
Issue management software and remediation management software are most useful when corrective work stays attached to the evidence that created it.
From gap to closure
Assess
Evaluate the control or risk and retain the method, evidence, date and assessor.
From gap to closure
Identify
Create an issue linked to the failed control, affected risks and relevant assessment or audit.
From gap to closure
Remediate
Assign the corrective action, accountable owner, due date and expected result.
From gap to closure
Verify
Review evidence and status in the original context before the issue reaches its agreed outcome.
A simple example
When a control does not operate as expected
Suppose an assessment finds that a required review is not being completed consistently. The issue records the gap and the affected control. The remediation action records who will change the process and by when. The linked risks show why the work matters.
This avoids an action tracker that says only 'fix review process' and leaves future reviewers to reconstruct the reason.
- Assessment evidence retained
- Issue connected to control
- Action connected to issue
- Risk rationale available for reporting
Questions answered
Frequently asked questions
Can one control be related to several risks or obligations?
Yes. Reusing a control record reduces duplicate descriptions and keeps ownership and assessment information consistent.
Can risk assessments create issues and remediation?
Yes. Risk assessment software functions, control and issue management, and corrective action use the same connected Parapet records.
Are inactive issues and actions charged?
Inactive and archived items are not charged unless they are used for reporting or reactivated in that month.