OMB A-123 Compliance Lifecycle
The OMB A-123 compliance lifecycle includes the following steps, all automatically enacted by the ProcessGene™ GRC Software Suite:
Lifecycle step |
OMB A-123 activity |
|
OMB A-123 context establishment |
- Definition of OMB A-123 compliance related business processes
- Delineation of process diagrams (optional)
- Definition of assets within the OMB A-123 scope
- Standardization and documentation of OMB A-123 regulations, policies and procedures
|
|
Risk identification |
- Risk description, identification of risk stakeholders
- Risk classification and determination of heat-maps
- Risk assessment and measurement (before implementing internal controls)
- Determination of Key Risk Indicators (KRIs)
- Risk tolerance determination
|
|
Internal controls determination |
- Definition of internal controls to mitigate identified OMB A-123 risks
- Assignment of OMB A-123 internal control owners
- Scheduling and monitoring OMB A-123 internal controls execution
- Assessment of residual risk levels (after implementing the internal controls)
|
|
Requirement management |
- Requirement definition
- Automated requirement workflow management
- Requirement fulfillment monitoring
|
|
OMB A-123 audit and remediation |
- Definition and scheduling of OMB A-123 audit plans
- Definition of mechanisms for testing ongoing OMB A-123 compliance
- Collection, analysis and storage of OMB A-123 audit results
- Remediation plan definition, execution and follow-up
|
|
OMB A-123 related incident management |
- Incident recording
- OMB A-123 related incident handling (using scheduled workflows)
- OMB A-123 related incident analysis and reporting
- Incident monitoring and follow-up
|
|
OMB A-123 certification |
- Hierarchal OMB A-123 certification process determination
- Establishment of an automated OMB A-123 certification process
- Monitoring and reporting OMB A-123 certification status
- Archiving OMB A-123 certification history
|
|
Multi-Org management |
- Determination of a global OMB A-123 compliance baseline with mandatory components
- Establishing a workflow for examining local (subsidiary) variants
- Enforcement of enterprise guidelines, regulations and frameworks within subsidiaries
- Control OMB A-123 compliance level both locally (per subsidiary) and globally from a central HQ cockpit
|
|
|
|
The ProcessGene™ OMB A-123 Software UsersThe ProcessGene™ OMB A-123 compliance software provides value to the following users:
- C-level management (CEO, CFO, CIO, CRO, COO)
- Board of directors
- Compliance officers
- Internal auditors
- OMB A-123 compliance managers
Continue to: Related Regulations >
|