Share your expert advice, industry best practices, general tips & tricks you've picked up while working in Governance, Risk and Compliance and the like.
My company is starting to explore using Claude connectors / MCP into our ERP to help improve efficiency around flux analysis, reconcilations and more. Is anyone else looking into this yet? I am trying to understand the full impact on SOX scoping...
Hi all — is anyone using Workiva to collect control evidence on an ongoing basis? One of my main challenges in managing the SOX testing program is timely evidence submission from control owners. I’m considering implementing a process where: Evid...
Does anyone use the RCSA to perform an assessment on each risk? Sending multiple risks to one risk owner is not ideal in the format our assessment is designed. Does someone have something your risk owners have adopted to?
I'm curious how others keep track of what they're working on when they have multiple windows and tabs open in Workiva? For example, our organization uses Workiva for SOX using the 'Controls Management' Workspace Solution, and we also use it for ot...
I am curious what other folks do to establish a link (either an actual link or a reference) from your testing conclusions to your testing documentation attached to your testing forms, and from a technical standpoint, if there is a way to create an...
Currently using a centralized document and would like to explore Workiva's capabilities
Wondering how others are overcoming the inability to track changes for connected information, particularly as it relates to audit reports in the Audit Management Workspace.
We're relatively new to Workiva and looking to take full advantage of its capabilities. Wondering if anyone can share what successfully integrating risks, controls and procedures looks like? What are the keys to successfully integrating these comp...
Has anyone been successful at using Workiva Audit Experience to create, send out and gather responses to post audit client surveys?
Under which circumstances is Information Produced by the Entity (IPE) required by your external auditor? Could you please provide some instances of particular IPE that your external auditor has explicitly required? Are IPE requirements incorporat...
We are looking to best manage downgrades including through reporting. Would appreciate any insight into how you manage risk downgrades as well. We currently: Enter the date for the high-risk to medium-risk downgrade into the “Client Commitment D...
Annually, we risk rate each one of our SOX controls individually (i.e., low, medium, high). Although not the only factor, the risk rating influences the rigor of testing for the control. For lower-risk controls, there are circumstances where we di...
To assist with efficient communication of outstanding requests, is there a way to automatically generate a requests summary report of all outstanding requests for an assignee that can be sent on a specified frequency? For example, every week an em...
Hi, Is there any way that I can import the Control owners in Workspace to add to the Group Under "Members" tab of Classic Certification module?
Hi Team, Keen to understand how you are getting on with the integration between workiva workspaces (SOX and SEC reporting). Currently I have to download all my evidences from the SEC reporting tool and then manually upload it into the SOX tool for...
As a data admin and manager, how am I able to view risks and controls without going through Data?
Our understanding of PBC requests is that assignees can add support to a request over time, and as long as they don't click "submit" until they are completed, the request will stay open, but we will be able to see what has been uploaded. The desi...
Has anyone created their audit plan risk assessment within the audit module? If so, do you have a template or anything you are willing to share?
What's the best design/configuration for Quarterly PBC Requests e.g. application's user access reports/outputs and certifications/reviews? Audit Program - SOX <Year> Test Phase - Q1, Q2, Q3 or Q4? Control - Control ID for the SOX App/System's quar...
We are working to set up our data in Wdesk and are trying to plan ahead on how to handle secondary controls. Does anyone else renumber secondary controls when they change their risk profile? If so, what format have you used for control numbering...
We are looking for a RACI template to define Support responsibilities between Accounting and Systems Support.
Hello- We are trying to better visualize and map out our Policies & Procedures and how they reference exact lines of the specific regulatory document that the policy references across our entire organization. I have brought in both sets of documen...
I would be interested in how everyone (Audit or SOX) handles other observations. In an audit, occasionally you may come across an item that is not a risk, but more of an efficiency or good practice to do that would be beneficial to the client. I...
I was curious to see how others use Workiva to complete their vendor's SOC 1 reviews. Currently, within Workiva we use a large spreadsheet document, and create individual SOC 1 has a few of a standardized review template. SOC 1 reviewers attach t...
Has anyone used Internal Control Questionnaires (ICQ) in their Internal Control process. These ICQ's were compiled by the National Association of State Auditors, Comptrollers and State Treasurers, NASACT in 2013. Our state has numerous agencies t...
Good Afternoon All, I was wondering how your organizations are using Workiva (Wdesk) for fraud risk assessments. Is there a particular approach you have found to be most helpful? Thanks for your feedback!
We are an outside CPA firm, and we perform ICFR (SOX) testing for for several entities that use Workiva. We are trying to understand how to coordinate our testing within the Workiva platform. My understanding before reading articles in the Help ...
Hi I would like to know the quickest way to backup all files/test forms/reports (pretty much all data) from workiva to my computer. I can create a snapshot but do not see how to export it. Is there a better alternative? Thanks.
I'm finding I don't love the layout of ours and that they're difficult to follow, have some unnecessary fields, have some redundancies, and it's just time for a refresh. I was curious if there are any folks out there who have found their layouts t...
