Who is this article for?

Auditors who need to record assessments from external sources.

Assessment creation permissions required

External assessments allow you to record risk or control evaluations from external sources whilst maintaining a complete audit trail of all assessment history.

1. Creating an external assessment

To create an external assessment for a risk or control:

1. Right mouse click on the selected risk or control.
2. Select Make External Assessment from the right click mouse menu.
3. Complete the property fields and save.

The current assessment will be displayed for the corresponding risk or control. All historic assessments will be stored and available for future reference.

Note: You may accept an external assessment and this will create a duplicate as an internal assessment.

2. Understanding risk movement

Risks can have potentially multiple assessments in their history but at any time only one of them is the current assessment. It is possible for none of the assessment history to be the current assessment, for example when you choose to clear assessment.

Each risk has a previous assessment. The rule is that the previous assessment is the most recent assessment before its last review. This is then used to indicate if the current assessment is getting better or worse.

The risk movement information is also available and rolled up for analysis on the Risk Exposure and Risk Matrix screens.

Note: The risk movement is only available at the entity level. This is because audit risks are a snapshot in time so there is no need to analyse how risks are moving within an audit.

3. Viewing risk movement example

Taking the following risk as an example:

• Assessment 1 (High)
• Assessment 2 (Very High)
• Review 1
• Assessment 3 (Very High)
• Review 2
• Assessment 4 (Medium)
• Assessment 5 (High)

The current assessment is Assessment 5 and the previous assessment is Assessment 3.