Share your expert advice, industry best practices, general tips & tricks you've picked up while working in Governance, Risk and Compliance and the like.
My company is starting to explore using Claude connectors / MCP into our ERP to help improve efficiency around flux analysis, reconcilations and more. Is anyone else looking into this yet? I am trying to understand the full impact on SOX scoping...
Hi all — is anyone using Workiva to collect control evidence on an ongoing basis? One of my main challenges in managing the SOX testing program is timely evidence submission from control owners. I’m considering implementing a process where: Evid...
Does anyone use the RCSA to perform an assessment on each risk? Sending multiple risks to one risk owner is not ideal in the format our assessment is designed. Does someone have something your risk owners have adopted to?
I'm curious how others keep track of what they're working on when they have multiple windows and tabs open in Workiva? For example, our organization uses Workiva for SOX using the 'Controls Management' Workspace Solution, and we also use it for ot...
I am curious what other folks do to establish a link (either an actual link or a reference) from your testing conclusions to your testing documentation attached to your testing forms, and from a technical standpoint, if there is a way to create an...
Currently using a centralized document and would like to explore Workiva's capabilities
Wondering how others are overcoming the inability to track changes for connected information, particularly as it relates to audit reports in the Audit Management Workspace.
We're relatively new to Workiva and looking to take full advantage of its capabilities. Wondering if anyone can share what successfully integrating risks, controls and procedures looks like? What are the keys to successfully integrating these comp...
Has anyone been successful at using Workiva Audit Experience to create, send out and gather responses to post audit client surveys?
Under which circumstances is Information Produced by the Entity (IPE) required by your external auditor? Could you please provide some instances of particular IPE that your external auditor has explicitly required? Are IPE requirements incorporat...
We are looking to best manage downgrades including through reporting. Would appreciate any insight into how you manage risk downgrades as well. We currently: Enter the date for the high-risk to medium-risk downgrade into the “Client Commitment D...
Annually, we risk rate each one of our SOX controls individually (i.e., low, medium, high). Although not the only factor, the risk rating influences the rigor of testing for the control. For lower-risk controls, there are circumstances where we di...
To assist with efficient communication of outstanding requests, is there a way to automatically generate a requests summary report of all outstanding requests for an assignee that can be sent on a specified frequency? For example, every week an em...
Hi, Is there any way that I can import the Control owners in Workspace to add to the Group Under "Members" tab of Classic Certification module?
Hi Team, Keen to understand how you are getting on with the integration between workiva workspaces (SOX and SEC reporting). Currently I have to download all my evidences from the SEC reporting tool and then manually upload it into the SOX tool for...
As a data admin and manager, how am I able to view risks and controls without going through Data?
Our understanding of PBC requests is that assignees can add support to a request over time, and as long as they don't click "submit" until they are completed, the request will stay open, but we will be able to see what has been uploaded. The desi...
Has anyone created their audit plan risk assessment within the audit module? If so, do you have a template or anything you are willing to share?
