The Health Check leverages big data analytics to provide real-time insights into actions, issues and risks through Operational Dashboards.
The Health Check comes with the following predefined big data analytics to provide meaningful insights and actionable business intelligence on key data points:
- Policy Name by Rating
- Policy Group Owner by Rating
- Policy Owner by Rating
- Control Summary
Policy Name by Rating
The Policy Name by Rating dashboard was designed to identify and assess how well documented policies and procedures are at effectively addressing compliance obligations.
These graphs perform a count by policy name against the rating to make it easy to understand where deficiencies might exist in policy documentation and/or execution in addressing a particular compliance requirement.
How do you know which policies and procedures are working or not?
Policy Group Owner by Rating
The Policy Group Owner by Rating dashboard was designed to identify the functional owners for each policy or procedure that aligns with meeting a particular compliance obligation and to assess the distribution of policies by rating.
For example, where a review has highlighted a number of non-compliant obligations, this dashboard tracks back to the functional owner to identify how many policies that they may be identified as the owner for where the contents of these or execution is not satisfying the compliance requirement.
How do you track which business group owns a policy or procedure and the state of its compliance?
The Control Summary dashboard shows the distribution of the Control across individual Health Checks and/or the overall distribution across all Health Checks.
The level of control testing is an indicator on the level of detail each Health Check has gone through during the independent review process and the distribution across the design effectiveness scale indicates where control design is either not present or fit for purpose, as well as, the distribution across the operational effectiveness scale indicating where controls were not implemented or not performing effectively, highlighting areas for improvement.