HOPEX IRM > HOPEX Internal Control > Assessing controls > Control Direct Assessment
Control Direct Assessment
 
Direct Assessment Context
Assessing a Control
Assessing Multiple Controls Simultaneously
HOPEX IRM enables assessment of controls in terms of design and efficiency:
You can assess controls:
• Directly
• Through questionnaires sent to identified recipients.
*For assessment by questionnaire, see Managing Assessment Campaigns.
Direct Assessment Context
In direct assessment, the values of the control characteristics can be specified in two ways:
• in the properties of each control: Assessing a Control.
This is an "expert view" assessment.
*You can assess controls for which you have editing rights.
Direct assessment is carried out for all context objects available in the Scope section of control properties:
• Organizational processes
• Business processes
• Operations
• Entities
• Applications
*For more details on control contextualization see also Contextualizing Controls.
Assessing a Control
*Before assessing a control, you need to ensure it has been contextualized in an appropriate way. For more details, see Contextualizing Controls.
To directly assess a control:
1. Open the properties of a control.
2. In the Assessment page, click Perform Assessment.
*If the control has not been properly contextualized, a warning is displayed (a control must be connected to a process, in turn connected to an entity).
3. In the wizard that appears, select the context(s) to be included in the control assessment.
4. Click Next.
You can now select values that characterize this control (contextualized) in terms of:
• design
• effectiveness
*Other questions can be asked if your administrator has configured the questionnaire supplied as standard.
5. In the Control Design and Effectiveness fields, indicate whether the control is:
• Pass
• Fail
*Values are applied to all previously selected assessment nodes.
6. Specify the measure date in the calendar.
By default this is today's date. You can select a date earlier than today's date.
7. Click OK.
Control measures are created for each assessment node (ie. the control in a particular context).
You can create several measures on different dates in the same way.
Assessing Multiple Controls Simultaneously
If you have to assess several controls, it can be quicker to use the multiple assessment table. This table allows you to specify the same value for several assessment nodes of different controls.
*An assessment node comprises:
• an object to assess
• one or several context objects (entities, processes, operations), if necessary
To assess multiple controls simultaneously:
1. From the navigation menu click Assessment > Direct Assessment > Control Multiple Table Assessment Table.
2. Click Launch Multiple Assessment.
3. In the window that appears, select the assessment template:
• “Control Assessment”
• “Control Assessment by Entity and Regulatory Framework”
*For more details, see Available Assessment Templates.
4. In the displayed tree, select the context objects of interest.
*A control is assessed in the context of elements of the branch from the control up to the root.
The following Information is given in columns to help you select the controls to assess:
• Last assessment
• Open issues
• Control level
*This information is also available in the control dashboard. For more details, see Accessing Controls.
In the above example, if you select the "Manage Skills and Competences" process, all controls and context objects located at a lower level are selected, as well as all parent context objects up to the tree root.
*If you deselect a node of a branch, only the child elements of this branch are deselected.
5. Click OK.
The list of controls to be assessed in a particular context appears.
6. Enter the control Design and Effectiveness quality level:
• Pass
• Fail
7. After answering questions, click OK.
Assessments are created in the Assessment page of the control properties. For more details, see Displaying the Results of Control Assessment.