Accounting › Financial Controls
Deficiencies
The three levels are not synonyms: a material weakness has to be disclosed. A finding with no owner and no date is a finding that reappears next year.
Where to find it
- Module: Accounting
- Group: Close & Compliance
- Section: Financial Controls
- Screen: Deficiencies
Address in the console: /accounting/control-deficiencies
List · 13 columns · 15 fields on its form · 2 of them required
What the list shows
These are the columns of the list, in the order they are drawn. Any of them can be sorted on, filtered on, hidden, or exported.
| Column | Kind | Field name |
|---|---|---|
| No | Code | deficiency_no |
| Title | Text | title |
| Severity | Status | severity |
| Source | Status | source |
| Control | Code | control_no |
| Process | Status | process |
| Owner | Text | owner_name |
| Identified | Date | identified_at |
| Age | Number | age_days |
| Target | Date | target_date |
| Overdue | Yes or no | is_overdue |
| Compensating | Code | compensating_control_no |
| Status | Status | status |
The form
What is asked for when a record is created here. Required fields are marked; a choice drawn from a configuration list is one an administrator can extend without a release.
| Field | Type | Choices | Notes |
|---|---|---|---|
| Control | Choice | Looked up from existing records | |
| Title required | Text | ||
| Severity required | Choice | Configuration list | |
| Source | Choice | internal_test, internal_audit, external_audit, self_reported, incident, regulator, continuous_monitoring | |
| Identified | Date | ||
| Description | Long text | ||
| Root cause | Long text | ||
| Potential impact | Long text | ||
| Impact amount | Number | ||
| Remediation plan | Long text | ||
| Owner | Choice | Looked up from existing records | |
| Target date | Date | ||
| Compensating control | Choice | Looked up from existing records | What makes a deficiency survivable until it is fixed, and naming it is part of the assessment. |
| Remediated on | Date | ||
| Notes | Long text |
The rules that apply here
Everything on this screen obeys the platform rules rather than rules of its own. The ones worth knowing before you use it:
- Narrowing a list — search, conditions, sort, totals, export and saved views.
- What may be changed — the five grounds a record may not be edited on.
- Companies and business units — what the switcher above this list is doing to it.
- Creating a record — required fields, where choices come from, and how the number is allocated.
- Importing a spreadsheet — this screen accepts one, and it runs through the same rules as typing.