Who is this article for?

Administrators who need to understand Entity Matrices.

Administrator access to the Universe module is required.

Entity Matrices provide visual representations of risk and control assessments across your audit universe, allowing you to analyse and manage risks and controls at different organisational levels.

1. Understanding Entity Risk Matrices

Entity Risk Matrices display risk assessments and their ratings across your audit universe. The matrix layout and risk display depend on whether the entity uses a local or group matrix configuration.

2. Working with Local Matrices for risks

The availability of local matrix functionality depends on your entity configuration:

• If the entity uses a Local Matrix, the Roll Up / Group Matrix icon will be enabled in the ribbon
• If the entity does not have a Local Matrix, this icon will be disabled as the Group Matrix is already being utilised

When the Group Matrix is selected, the layout of the matrix will match its configuration and the risks will be displayed as per their mapping (that is, Local to Global mappings).

Note: The Process Navigator or Filters selection has no effect on the matrix used but will filter the data accordingly.

3. Understanding Entity Control Matrices

The Entity Control Matrix provides a visual representation of control assessments across your audit universe. Each control assessment allows you to rate the specific control in respect of the Control Design and the Control Operation.

The resulting scores are then graded according to a heat map, whereby different score combinations give rise to different grades and colours.

Selecting the Navigator displays the number of control assessments for all entities contained within that navigator level.

Clicking on a cell in the matrix displays a summary in the Data Grid of the controls that have that score.

Under the matrix is an unassessed field giving a count of the number of controls not assessed. Clicking on this will provide a summary list.

Note: The Control Matrix is available at Universe, Entity and Audit levels.

4. Working with Local Matrices for controls

Similar to risk matrices, control matrix functionality depends on your entity configuration:

• If the entity uses a Local Matrix, the Roll Up / Group Matrix icon will be enabled in the ribbon
• If the entity does not have a Local Matrix, this icon will be disabled as the Group Matrix is already being utilised

When the Group Matrix is selected, the layout of the matrix will match its configuration and the controls will be displayed as per their mapping (that is, Local to Global mappings).

Note: The Process Navigator or Filters selection has no effect on the matrix used but will filter the data accordingly.