Administrator Documentation

Customer administrator guide

Run daily GRC operations with confidence

Use this documentation to configure responsibilities, run assessments, manage risks, publish policies, prepare audit evidence, and produce management reports from the portal.

Start as a new adminFind a taskRun assessment playbooks

This site is written for customer administrators, process owners, control owners, auditors, and executives. It explains what to do in the portal, when to do it, what each status means, and how records affect dashboards and reports.

Start by Role

Tenant AdminSet up users, roles, departments, workflows, ownership, and recurring operating routines.Compliance ManagerPrepare control scope, run assessments, review evidence, and close compliance gaps.Risk ManagerScore inherent and residual risk, assign treatments, track approvals, and monitor accepted risks.Control OwnerRespond to assessments, attach evidence, remediate gaps, and complete assigned actions.AuditorPlan audits, request evidence, record findings, and prepare evidence packs.Executive ViewerRead dashboards, interpret KPIs, and review management report packs.

Start by Task

Run a compliance assessmentCreate scope, assign owners, collect responses, review evidence, and close the assessment.Convert non-complianceTurn a failed control into a risk, issue, audit finding, or corrective action.Manage a critical riskValidate score, select treatment, track mitigation, and prepare acceptance or closure.Publish a policyDraft, review, approve, publish, and track acknowledgements.Onboard a vendorRegister the third party, assess risk, assign ownership, and monitor follow-up actions.Prepare an audit packCollect evidence, review findings, confirm owners, and package the audit response.

Core Modules

Module mapCompliance and assessmentsRisk managementControlsPolicies and governanceAudit managementIssues, exceptions, and incidentsThird parties and assetsPrivacy and awarenessReports and analytics

Reference and Help

Permissions and rolesUse this before assigning access or approving segregation-of-duties decisions.Workflow and status referenceCheck what each status means and what action is expected next.Data quality guidePrevent broken reports by maintaining owners, dates, evidence, and review discipline.Report and KPI assumptionsUse this before presenting dashboard numbers or explaining KPI movement.TroubleshootingSelf-check common workflow, data, permission, and report issues before escalation.Support readinessCollect the right record details, screenshots, and impact summary when support is needed.

Operating Rhythm

Configure structure first, then operate records. Keep roles, departments, job positions, workflows, templates, owners, review dates, and evidence rules stable before teams create large volumes of risks, assessments, audits, policies, incidents, vendors, or asset records.