Skip to main content

Get help for ARIS

Create compliance assessment definition

Create a compliance assessment definition for each relevant regulation or regulatory requirement or use imported ones. Alternatively, you can create compliance assessment definitions in ARIS Risk and Compliance.

Prerequisite

  • You have the Regulation manager Risk and Compliance role.

  • The relevant regulation or regulatory requirement is available in ARIS Risk and Compliance, or the requirement allocation diagram to which the regulation or regulatory requirement is associated has the Transfer to ARIS Risk and Compliance attribute enabled.

Procedure. Procedure

  1. Click Application launcher Application launcher > Published content Published content.

  2. Open the Compliance assessment fact sheet of the regulation or regulatory requirement for which you want to create a compliance assessment definition.

  3. Click Show schedulers Show schedulers. If existing, the list of compliance assessment definitions (schedulers for compliance assessment tasks) of this regulation or regulatory requirement are displayed.

  4. Click Add Create.

  5. If the selected regulation or regulatory requirement is not available in ARIS Risk and Compliance, it can automatically be transferred to ARIS Risk and Compliance. If you agree, accept the prompt that is displayed in this case.

  6. If you are logged in as a user with access to multiple environments, a dialog is displayed with the available environments. Select the environment and click OK. The form divided into Overview, Information, and Task schedule is displayed.

  7. Enter the name, for example, the name of the regulation.

  8. Describe the impact on the company (description) and what needs to be done (activities).

  9. Click Information Information.

  10. Assign documents, for example, the link to the regulation text.

  11. Assign the relevant regulatory requirement and, if applicable, a risk.

  12. Assign the affected regulation hierarchy elements.

  13. Assign other affected hierarchy elements, for example, the organizational unit to be informed about the new or changed regulation.

  14. Click Task schedule Task schedule.

  15. Specify the attributes relevant to generate the compliance assessments, such as frequency, duration, and start date.

  16. To allow manual generation of compliance assessments, set Event-driven tasks allowed to Yes.

  17. Assign the roles responsible to perform (regulation owner or hierarchy owner) and review (regulation reviewer) the compliance assessment.

    Administrators can configure in the Risk and Compliance configuration of ARIS Administration whether and how many reviews are required. If more than one role is required to perform a result check, the roles perform the result review in the order in which they are modeled at the associated object. In other words, the role that is closest to the related object performs the result review first.

  18. Click Save Save.

The scheduler for compliance assessment tasks (compliance assessment definition) is created. The compliance assessments are automatically generated at the points in time specified.

Next step: Perform compliance assessments