Using Issues Management

The Archer Issues Management use case is built to enable the following processes.

Defining Your Organization

Documenting your Company, Divisions, and Business Units creates a business hierarchy in Archer. From this hierarchy, you can view organizational impacts and relationships, produce real-time reports, and leverage the use cases you have licensed.

Managing Your Findings

Findings are generated either automatically based on questionnaire results, or manually. When a finding is reviewed, the Finding Reviewer can either accept, reject, or invalidate that finding. When a finding is accepted, a remediation plan or exception request must be created for that finding. Findings with an audit source require a remediation plan or exception request and must go through an additional review process.

Managing Your Remediation Plans

Approved findings must be linked to a remediation plan or an approved exception request. Remediation plans can be approved or rejected. If approved, the Findings record continues to the next stage in the advanced workflow. If rejected, the Remediation Plan Owner must edit and re-submit the remediation plan for approval.

Managing Your Exception Requests

After a finding is opened, users can submit an exception request asking the business to temporarily accept the risk identified in the finding. The exception request allows users to update the due date for the finding, providing them with additional time to resolve the issue. When the exception request is approved, the Finding is updated with a status of Closed. The Finding record remains closed until the exception request expires, at which point the Finding status updates to Open.

Managing Change Requests

You can use the Change Requests application to process and review update requests for completed or approved records in policies, control standards, control procedures, process narratives, and evidence repositories. Through the Change Requests application, you can also process and review new record requests for the five content types.