How do you populate the Control Method field with a new custom value, such as a third-party application'?
A. Enter the new value directly in the Control method field.
B. Use Lookup Meaning of the new lookup value.
C. Use Lookup Code of the new lookup value.
D. Use Lookup Type of the new lookup value.
Which two steps are required to set up two levels of approval for new controls, which are added after the initial import? (Choose two.)
A. On the Controls tab of the Import template, set the control state to NEW for each control record.
B. Identify the organizations or business units for which users will perform review or approval.
C. Identify users who will perform control review and approval.
D. Identify the other roles to be provided for control managers.
After generating an XML file export of Advanced Controls perspectives, you receive a message that the export job has been generated. What are the three steps you need to perform in order to download and review the formatted export file? (Choose three.)
A. Open with an XML editor, such as Excel.
B. Navigate to Monitor Jobs and click the message link for the export job.
C. Click the Item Results link.
D. Click the Export File button.
E. Open with an HTML editor.
The internal auditor advised the Control Owner of North America to perform assessment for two P2P controls.
Which three steps can the Control Owner perform to kick-off assessments for only those two controls? (Choose three.)
A. Initiate a planned assessment that includes all controls assigned to perspective P2P.
B. Perform impromptu assessments for the two controls.
C. Enable impromptu assessments during configuration of module objects.
D. Initiate a planned assessment and include the two controls as part of the same assessment.
E. Initiate two planned assessments, one for each control.
An organization has a list of companies with which they no longer wish to do business. The list is not stored in their ERP Could but is stored in a file. Which transaction model will identify payments made to these companies?
A. Create an Imported business object that can be used in conjunction with Oracle's pre-built "Payment" object. One both objects are in your model, add this standard filter: the "Payment" object's "Remit to Supplier Name" is similar to the custom object's "Company Name" by 95%.
B. Add a configurable attribute "Company Name" to Oracle's pre-built "Payment" object. Then add this standard filter: "Remit to Supplier Name" equals "Company Name".
C. You cannot define this model because imported objects from a file cannot be used with delivered objects.
D. Create an Imported business object that can be used in conjunction with Oracle's pre-built "Payables Invoice" object. Once both objects are in your model, add this standard filter: the "Payables Invoice" object's "Supplier Name" equals the custom object's "Company Name".
When you view or edit a transaction incident, you may see extra columns that are not present in the business objects used in the control. What three kinds of control logic or conditions can cause this? (Choose three.)
A. Equals (when the same attribute is used on both sides of the condition)
B. Not in
C. Similar
D. Average Function
E. Between (when using a date attribute)
You need to schedule the report "Access Violations by User." Which two steps do you take to create the saved parameters for the report schedule? (Choose two.)
A. Navigate to Administration Reports.
B. Highlight the report name and click Run Now.
C. Navigate to Scheduling under Setup and Administration.
D. Click Save Report Parameters to create saved settings.
E. Select Display Scheduled Reports.
When validating imported data, the control manager at your client has identified an incorrect Risk- Control mapping; that is, Control A was mapped incorrectly to Risk B instead of Risk. What needs to be done to fix the mapping?
A. Option A
B. Option B
C. Option C
D. Option D
Which two should you determine to ensure that your client can successfully maintain and administer Perspectives post go-live? (Choose two.)
A. Identify if your client wants to review and/or approve new perspectives or changes made to existing perspectives.
B. Identify lookup values that need to be created for Control, Risk, and Issue Type fields.
C. Identify users who will be responsible for creating and maintaining perspectives, both for security as well as reporting.
D. Identify users who will be responsible for creating and maintaining controls and/or risks.
You are helping your client identify and define their controls. You have determined that your client requires two perspectives: Business Units and Regulatory Standards. The controls are going to be secured by the business unit, and you want
to ensure that when the client defines new controls, it is mandatory to assign a Business Units perspective to the control. You are going to set the "Required" field to "yes" for the Control-Business Units association.
Where do you do this in the product?
A. The Create Control screen
B. The Manage Object Perspectives screen
C. The Import template
D. The Create Perspectives screen
E. The Manage Module Perspectives screen
You have defined an initial Perspective Hierarchy for your client in the Advanced Controls module. After refining their business requirements, your client wants to expand the existing hierarchy to include 150 perspective items in various levels.
For efficient processing, you decide to use the GRC data migration feature to import the new items.
Which three are valid processing steps required to define the export file? (Choose three.)
A. Navigate to Risk Management Tools > Setup and Administration > Data Migration, and select Advanced Controls.
B. Generate Template as Without Data.
C. Navigate to Manage Module Perspectives.
D. Generate Template as Without Data ?Perspectives Only.
E. Click the Create Import Template button.
Your client has asked you to define a transaction model to identify duplicate invoices based on Invoice Numbers and Invoice Amounts. Which two standard filters can be combined to accomplish this? (Choose two.)
A. The "Payables Invoice" object's "Supplier ID" does not equal itself.
B. The "Payables Invoice" object's "Invoice ID" is similar to the "Payables Invoice" object's "Invoice Number".
C. The "Payables Invoice" object's "Invoice Amount" is equal to itself.
D. The "Payables Invoice" object's "Invoice Number" is equal to the "Payables Invoice" object's "Invoice ID."
E. The "Payables Invoice" object's "Invoice Number" is equal to itself.
Your customer needs to conduct monthly Operational Effectiveness assessments for controls across two organizations (North America and EMEA). Your customer requires that assessment results for North America be accessible only to
users in North America and likewise for EMEA. Additionally, the Chief Risk Officer reviews the assessment results by Business Process every week.
How should you design perspectives to achieve this?
A. Use the Region hierarchy for security and the Business Process hierarchy for reporting of controls.
B. Use the Region hierarchy initially, and later use both Region and Business Process hierarchies for security.
C. Use both Region and Business Process hierarchies solely for reporting purposes.
D. Use the Business Process hierarchy for security and the Region hierarchy for reporting of controls.
Your client needs to perform Design Review and Certification assessment for all their controls. Identify two options that show how this requirement can be met. (Choose two.)
A. Option A
B. Option B
C. Option C
D. Option D
E. Option E
The GRC Business owner responsible for reviewing and investigating access incidents related to the "Order to Cash" perspective does not see any worklists for the generated results. You have validated that:
1.
Other business owners are able to view their assigned worklists without any problem
2.
Incidents have been generated for the controls related to Order to Cash
3.
The business owner's assigned roles contain the correct functional privileges and data access to the correct perspective values
What is the reason the business owner cannot see any worklists for the generated incidents?
A. The Result Management Perspective Assignment has not been linked.
B. The underlying model is not linked to Order to Cash.
C. The business owner was recently assigned the role and the worklist needs to be refreshed.
D. Worklist assignment does not include the business owner.
E. The Control Perspectives are not linked to the control.