Know frameworks and methods

Understand the two elements that define the content and scoring of a GRC evaluation.

Frameworks and methods work together to define what will be evaluated and how the result will be measured.

What you will do

You will consult the frameworks and methods available for the active organization and understand the role of each one before starting an evaluation.

Who can do this

Users with access to the GRC module can consult the available catalogs. Creation, import, copy, edit or delete actions appear only when the profile, the active organization and the license allow it.

Before you start

Log in to Wasa and confirm the active organization.
Check if the GRC module is available.
To create or import items, confirm that the corresponding actions appear enabled on the screen.

Menu path

For frameworks: GRC → Frameworks.
For methods: GRC → Evaluation methods.

Steps

Open Frameworks to consult the available structures.
Observe the name, version, state and organization of the controls of each framework. "Framework" is the structure that brings together the controls and their groupings for an evaluation.
When you need to know the content, use View structure or Edit structure, depending on the action available for your profile.
Open Evaluation Methods to consult the available scoring methods.
Observe the scale, levels and criteria of the method. The method transforms the response given to each control into a maturity rating.
Before starting an evaluation, confirm if the framework represents the topic that will be evaluated and if the method presents the scale appropriate to the desired result.
To remove a framework from current use, open Actions, select Archive, check the name in the confirmation and confirm Archive again.
To consult items removed from current use, select Archived.
Use Delete only when the action is available and the framework is not linked to reviews. Check the name in Permanently delete the framework before confirming.

A framework defines what will be evaluated. A method defines how each control will be scored. The chosen combination follows the created evaluation.

Expected result

You can differentiate frameworks from methods, consult the available options and recognize which combination meets the objective of the next evaluation.

Common problems

Situation	What to do
No framework or method appears	Confirm the active organization and check if the catalog has items available in this context.
The action to create, import or edit does not appear	Confirm your access profile, the active organization and the availability of the license. Use only the actions enabled on the screen.
A framework is in draft or archived	Use an active item for new reviews. Drafts are not yet available and archived items are for historical reference.
Delete does not appear or is disabled	A framework used by reviews must be preserved. Check the links and prefer archiving.
The method does not present the expected scale	Consult another available method before creating the evaluation. Do not change an evaluation just to change its scoring method.