Attesting Controls

Stand: 25.05.2025

Overview

This guide explains how to navigate the Risk and Compliance section to report on controls within the GSC Actions module. You will learn how to view and complete reporting tasks, filter controls, and track the progress of the controls that need to be attested.

---

Step 1: Accessing the GSC Actions Module

1. Navigate to Risk and Compliance:
   Go to the Risk and Compliance section from the main menu. Select GSC Actions.
2. Viewing Assigned Packages:
   In this section, you will see the assigned packages that you are responsible for reporting on. You will also find the status of the report completion for each package.
   Example:
   • Loan Approval EUI 2025: 100% completed.
   • Portfolio for GDPR Processor 2025: 0% reported on.

---

Step 2: Selecting a Control Package

1. Choose a Package:
   Select the package you wish to report on, for example, GDPR Processor 2025. This will load the corresponding control actions that need to be reported on.
2. Review the Control Actions:
   On the left side, you will see the list of required controls that need reporting. On the right-hand side, you will see the state of the report, including whether any controls have been attested.

---

Step 3: Reporting on Controls

1. Viewing Control Details:
   Click on a control action to see more details. A description of the control action will appear, allowing you to enter relevant information.
2. Attesting Controls:
   After entering the necessary details, click Attest. The control will be marked as attested on the right-hand side. Your reporting progress will update, showing an increase in completion status.
3. Monitor Overall Progress:
   Keep track of your overall progress on the statistics panel, which updates as you attest each control.

---

Step 4: Filtering Controls

You can filter the controls to focus on specific areas or based on importance. Use the filter options to narrow down the controls you need to report on.

1. Filter by Importance:
   Focus on important controls by selecting the importance filter.
2. Filter by Framework Type:
   If the package includes multiple frameworks, you can filter by the framework type (e.g., GDPR, Loan Approval).
3. Filter by Control Type:
   Choose to focus on either procedural or technical controls, depending on what needs to be reported.
4. Filter by Life Cycle Stage:
   If you are in an early stage (e.g., planning), there may be fewer controls to report on. You can filter by life cycle stage to reduce the scope of your current reporting tasks.

---

Conclusion

By following this guide, you will be able to:

• Access and view assigned packages.
• Report on and attest individual control actions.
• Filter controls to focus on what's most relevant.
• Track your progress towards completing the reporting requirements.