{"id":28678,"date":"2021-08-16T07:56:39","date_gmt":"2021-08-16T07:56:39","guid":{"rendered":"https:\/\/compliancenow.nagarro-es.com\/?page_id=28678"},"modified":"2022-12-12T11:01:44","modified_gmt":"2022-12-12T11:01:44","slug":"ic","status":"publish","type":"page","link":"https:\/\/compliancenow.eu\/en\/insight\/faq\/ic\/","title":{"rendered":"Internal Control"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
<\/div>\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

Homepage<\/a><\/span><\/span><\/p>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t

FAQ - Internal Control<\/h1>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

See our collection of questions in the FAQ \u2013 Internal Control<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\"IC\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t

FAQ - Internal Control<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

As our newest tool in the CN Suite, Internal Control is an SAP-integrated framework supporting the documentation and execution of your company’s controls. We are continuously developing it, and the feedback we have received from our many customers has been invaluable in order to build the most efficient tool and helping our customers to move from today\u2019s manually handled control environment to an automated one. We have collected 10 of the most common and relevant questions regarding Internal Control and crafted this blog post for you to learn about the more technical functions of IC.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow does the workflow work?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

The workflow is predefined between the following roles in CN Internal Control; Executer, Approver and Compliance Manager. The individual control persons are allocated through specifying the email address. The notification email can be configured to support needs.<\/p>

You can also add additional persons for each role as well as defining a substitute that will cover in case of absence. Along with the notification email the tasks allocated to person workspaces in SAP. The workspaces for the Executer, Approver and Compliance Manager will also be available as a Fiori in the Launchpad.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tAre there any predefined controls?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Yes, IC is delivered with a control library of around 150 predefined controls supporting Finance, Procure to Pay, Order to Cash, HR & Payroll, Basis & Security and more.<\/p>

The Control Library is extended on an ongoing basis, and we encourage customers of CN Internal Control to share controls in the hope of generating a sharing control community supporting among CN Internal Control customers.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhat does it take to install Internal Control?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Basically, it is very easy to install CN Internal Control. The ComplianceNow add-on needs to be installed on your SAP system as well as the application server (webserver) need to be set up. You can choose to have the webserver hosted by ComplianceNow. This way the CN team will take care of all related to the webserver.<\/p>

If you choose to self-host, you will need some knowledge about Apache, php and MySQL. We will naturally support you in the process as standard of our fixed priced installation package. Expect that installation to have a duration of 2-3 days.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan I upload my external auditors control library?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Of course! You can easily upload new controls, maintain existing or extend the control library by defining your own controls. From the up- and download centre of CN Internal Control you can use the Excel template to document all controls and upload these in one simple action.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan I assign the control to multiple departments, areas, countries etc.?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

The controls can be configured to support the exact needs of your organisation. Around 30 fields can be modified on the individual control, with some of the key fields being Control Executer, Frequency, Due Date, Compliance Manager and Approver.<\/p>

If you choose to derive a control to e.g. France, Germany and the UK a specific field will apply for the individual derived controls to specify unique characteristics, actions or other information for, in this case, the country.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tDoes your tool support Three Lines Model?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Yes, CN Internal Control support the Three Lines Model. Governing Body \u2013 CN Internal Control (IC) will provide a framework and a process delivering accountability to stakeholders throughout the organisation. Management \u2013 IC has defined process and roles for provision of control operation reporting back to the Governing Body.<\/p>

Internal Audit \u2013 can independently follow the process, status and level of documentation interacting and aligning with the Management.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan IC deliver email reminders?\u200b<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

If a task is overdue, an e-mail-reminder is generated and sent to the responsible person, the deputy and\/ or superior. E-mail reminders is an important function in a control process, but we must be careful not to overdo the information level.<\/p>

Therefore, you can specify the level of reminders for both Executers, Approvers and Compliance Managers if and how often they should receive a notification email.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan I get an overview of the open controls?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

The easy-to-access information and overview from the Control Dashboard will support the team working with controls. Different Dashboard views support each step of the control process, delivering insights into overdue controls, findings, and other key control indicators. From all Dashboard views you can download more details into an Excel file.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tCan the controls be linked to the overall company risks?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

In the Enterprise Risk Management module (ERM) you can define your overall enterprise risks. The key logic of ERM is that you link the operational control specified in the Control Library to the overall risk defined in the ERM. Each enterprise risk is measured in levels of severity and likelihood delivering important input to the Risk Map with a real-time update if the company has mitigated the defined risk.<\/p>

The ERM and the Risk Map will keep you updated of the present status and to what extent severe risks with a high likeliness are not mitigated by the appointed controls. To quickly react to gaps in the control process you can drill down directly from the ERM to the individual control template, identifying individuals responsible for executing and approving the controls.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhy is IC running in SAP and not as a SharePoint solution?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

ComplianceNow is an SAP Certified Suite of multiple compliance add-on components supporting the company\u2019s operation of Compliance. The control process is critical and sensitive data and information needs to be processed and stored.<\/p>

SAP is a solid and proven platform to run the process and trust storing the data. Furthermore, by using SAP\u2019s authorization and user management concept we can rely on a well-defined concept and with little effort setting up control users and workflow.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tWhy should I implement an internal control system? What do I have to consider?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

Companies with unmatured or no controls process often have a perception of no risks and\/or no unmitigated risks. By investing in a control process\/system the company will unlock and get documented the risks having potential operational, financial, or reputational damage to the company.<\/p>

Implementing a system-based control process will support driving and maturing the entire control process. Furthermore, it will increase the transparency and drive a reporting and information level throughout the year moving toward the auditor\u2019s arrival.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t

\n\t\t\t\t\t

\n\t\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t<\/i><\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\tHow does the tool support audit logs and general documentation?<\/a>\n\t\t\t\t\t<\/h3>\n\n\t\t\t\t\t

CN Internal Control logs all changes to the Control Library. This regardless of if the controls are changed directly or indirectly through uploads. Furthermore, a control already circled for control will not be changed despite an adjustment to the master template. As goes for the control being circulated IC has a log capturing all documentation, comments and uploaded files.<\/p><\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t\t