Create and Map Internal Controls to your Assets

Internal Controls auto-populate in the Asset Record, once they have been created and mapped to a corresponding Risk in your Risk Register. You can create your Internal Controls in the Compliance Section > Internal Controls, and map your control to a Risk in the Risk Register.

1. Go to the Compliance Section in your 1Risk Register and select the Internal Controls view.
2. Click “Add New”. (Note: you can also bulk import data from a spreadsheet or via API Integration - contact your account manager or support@c1risk.com).
3. Populate the fields in the Internal Control Record

1. Control Name: Summary of the Control Description or activity
2. Control Description (a single statement with the following information)

1. Who is carrying out the control
2. What is the action
3. How often is the control implemented

3. Source: A reference tool to help you categorize the control in your list view
4. Type: Manual or Automated
5. Control Strength: Specify the expected control effectiveness by management
6. Control Frequency: Schedule the implementation of the control
7. Nature of the Control: Detective, Preventative, Corrective
8. Key Control: A permanent control designed to reduce the chance of risk (Contrary to a compensating control)
9. Risk Register: (see next instruction ‘4’ here below)
10. Primary Contact: The Control Owner (must also be a registered contact on C1Risk

4. Risk Register: Note the Risk Register section has two options: Use the “+” sign to create and map a new Risk Register record (one or multiple may be selected). Use the ? to look up and map an existing record. If your Risk Register record is connected to an Asset, the Internal Control will now automatically map.
5. Click Save