ZenGRC v2.4 Release Features

Our latest ZenGRC product release continues to deliver improvements designed to simplify the management of your compliance program. New capabilities now available in v2.4 include:

Audit Dashboard

Running audits requires a lot of work. Due to a large amount of evidence and correspondence, audits are difficult to project manage and even more difficult to report on.

The new Audit Dashboard addresses these hardships by enabling compliance teams to project manage and report on an audit. It fulfills three main functions:

1. 1.Visibility into Audit Posture: How effective are my controls testing?
2. 2.Visibility into Audit Progress: How close am I to completing assigned objects?
3. 3.Project Management capability: Based on audit progress.

The Audit Dashboard allows you to view and manage a single audit or all audits at once. Status graphs illustrate the percentage of controls that have been tested to be Effective, Ineffective, or Open (not yet tested), and help you manage the three assignable audit objects: Requests, Assessments, and Issues.

Requests

The Request object is used to collect evidence. You can import a Document Request List (DRL) and use the Request object to collect evidence. Status bars allow you to quickly see which evidence requests are in-progress, finished (and waiting for verification), or overdue.

Assessments

The Assessment object is used to test and conclude upon the effectiveness of controls. It can be used instead of bulky workpaper spreadsheets. Assessments can be assigned and project managed using status bars corresponding to their state.

Issues

Issues, also known as gaps or findings within an audit, have new states to help you better track remediation. A reminder button on the assessments tab helps you keep track when there is an ineffective assessment without a mapped issue.

Controls Tab

The Audit dashboard includes a table of objects for Controls. In the controls tab, you can filter the list of controls for Effective, Ineffective, or Open. This allows you to investigate the effectiveness of a control. If a control is ineffective, you can quickly click on the related issue and take action to delegate or manage its remediation.

Shareable Permalinks

All filters are saved in the URL, allowing you to filter for an audit and assignee, and share that link with colleagues so they can see the same view.

Evidence Request Dashboard

Evidence Request assignees represent the largest portion of occasional ZenGRC users. The Evidence Request dashboard allows evidence owners to easily sort their assigned requests, without the complexity of audit objects irrelevant to their work. Its functionality mirrors the Audit Dashboard but is designed specifically for evidence request assignees. Filters also create permalinks that can be shared and favorited in your browser.

Weekly Summary Email

You can now see everything assigned to you, summarized in a weekly email sent every Monday morning at 9AM EST (if you have assigned work). The email includes a "Complete" button to access your Audit dashboard filtered for your requests or assessments, or your "My Tasks" page. Overdue items are highlighted, and clicking on them takes you to a filtered list of overdue work.

Agile Workflow Setup

Setting up and delegating tasks is now easier with an updated workflow to support agile setup. Task groups are now optional. Objects can be mapped directly to tasks, and tasks can be stored as template tasks for later use if the workflow is recurring.

Recurring Evidence Requests

Evidence requests can now be set to recur automatically based on the following frequencies:

• ​Never
• ​Monthly
• ​Quarterly
• ​Semi-annually
• ​Annually

ZenGRC Now Works in Safari

ZenGRC now supports the latest release of Safari browser for Mac platforms. This compatibility will apply to future releases of ZenGRC.

For more details around the new features available in ZenGRC v2.4 you can view the release notes or contact us with questions.