GRC overview
Understand how GRC organizes evaluations, maturity and action plans at Wasa.
The GRC brings together governance, risk and compliance work in assessment journeys that help the organization measure its current situation and better track improvements.
What you will do
You will learn about the main areas of the module and understand how an evaluation progresses from the choice of what will be evaluated to the reading of maturity and the monitoring of action plans.
Who can do this
Users with access to the GRC module in the active organization.
Before you start
- Log in to Wasa and confirm the active organization.
- Check if the GRC module appears in the menu.
- To work on a specific evaluation, confirm that it is available for your profile.
Menu path
In the main menu, select GRC → Overview.
Steps
- Open Overview to consult the indicators and follow-ups available for the active organization.
- Consult Active Assessments. "Assessment" is the label used in Wasa for an evaluation cycle.
- Use Maturity by grouping to compare the result of a completed assessment between the groups of the selected framework. "Framework" is the control structure used in the assessment.
- Consult Ongoing Assessments to locate cycles that are still receiving responses.
- See Last calculated maturity to recognize the most recent available result.
- Track Active action plans and, when applicable, the Maturity projection associated with a plan.
The Open Risks card and the Recent Risks dashboard appear as Soon. They do not represent an available journey and should not be used as a way to register or track risks.
GRC capability checklist
Use this list to find a task. Actions depend on your role, active organization, and license.
- Explore frameworks and methods to choose the assessment structure.
- Start an assessment, answer controls, attach evidence, and invite participants.
- Track assessments, complete them, and interpret maturity results.
- Create checkups and action plans to organize improvements.
- Add or import suppliers and assess them.
- Generate reports and check licensing.
Risk features marked Coming soon are not available capabilities.
Expected result
You identify the ongoing assessments, the already calculated maturity results and the active action plans of the organization. The overview serves as a starting point to choose the next task in GRC.
Common problems
| Situation | What to do |
|---|---|
| The GRC does not appear in the menu | Check, in this order: your access profile, the active organization, the invitation associated with the account and the availability of the module. |
| The overview does not present evaluations | Confirm that the correct organization is active and that there is already an evaluation available in this context. |
| The grouping maturity is empty | Select a completed assessment. This view depends on a maturity result already calculated. |
| Risks appear as "Soon" | There is no available task for risks on this screen. Use only the active GRC journeys. |