Managing issues
Creating Issues
You can create issues at all times, for example when a test activity was poorly evaluated.
To create an issue:
1. In the HOPEX IRM desktop, select Test > Remediation > Issues.
2. Click New.
3. Enter a Name.
4. In the Category field, specify whether the issue:
• was detected at control assessment
• was detected when performing tests
• is generic
5. Specify the Impact: enables to qualify the impact of the issue (low, high..)
6. Enter a Description.
7. Click OK.
Scoping an Issue
You can specify how the issue has been detected.
To define the scope of an issue:
1. In the properties of the issue, expand the Assessment Scope section.
2. Connect:
• a est activity, or
• one or several assessed controls
Remediating Issues
To remedfiate an issue, you may create an action plan directly from this issue.
For more details, see Managing Action Plans.
Following-Up Issues
Viewing remediated / non-remediated issues
To view remediated / non-remediated issues:
1. Click Test > Remediation > Issues.
2. In the drop-down list, select:
• “Closed Issues” (whose action plan is closed)
• “Open Issues”
Generating issue follow-up reports
To generate an issue follow-up report:
1. Click Analysis > Controls > Remediation.
2. Click New to create a report.
3. In the Parameters page, define filter criteria if necessary and select:
• an entity
• a process
• a Begin Date: to obtain issues created after this date
• an End Date: to obtain issues created before this date
By default the end date is the current date.4. Select the Reports tab to view the result.
This report shows distribution between issues:
• remediated
• non-remediated
• that do not yet have an action plan