How do I prepare for an Audit?

Use the following as a checklist to help you be sure you've done everything you need to do, and are ready to begin your audit:

1. Verify that all of the sources of your data to be included in the audit have been uploaded to Gathid using the Upload Portal.
2. Access your Data Cleansing Dashboard and review the column and data formatting.
3. Be sure that all of your reviewers are contained in the appropriate security group to allow them to participate in the audit.
4. Close prior audits if needed BEFORE starting this audit
5. To proceed with the audit.
6. Locate the audit responses link and communicate to your reviewers

Steps to prepare and then to proceed with an Audit

1. Verify that all of the sources of your data to be included in the audit have been uploaded to Gathid using the Upload Portal.

1. 1. Check the data adheres to this checklist (click here). 
   2. Check the last data update in the Dashboards or System menu

2. Access your Audit Report to review the column formatting and data

Run the report and verify that it contains the information you are expecting.

Modify  - Add/Update column header names and included data output to make sense to the audit reviewer audience and confirm that the segments that each reviewer will review are accurate for the intended reviewer/s. 

3. Be sure that all of your reviewers are contained in the appropriate security group to allow them to participate in the audit.

In your organisation's identity provider service (i.e. Active Directory, Microsoft Entra ID, Okta), verify the relevant security group for responders lists the required members.

4. Close prior audits if needed BEFORE starting this audit

If you are about to start Privileged Access Audit Q2 2023 for example, ensure there are no outstanding responses in Privileged Access Audit Q1 2023. Responders receiving the Q2 audit will continue to see any of their own unfinished responses from previous audits. Contact your Gathid Representative if you require help, prior to starting the subsequent audit. 

5. Create the audit: 

1. Run your audit report/metric and view your report results.
2. Select the ellipses at the top-right and hit Create Audit
3. Create or add to an existing Campaigns 

1. 1. 1. Confirm the metric history date (if fresh data has been received, ensure this is the latest date available),
      2. On the Report Template tab, verify the actions have been set
      3. On the Responses tab, verify the Primary and Secondary responders have been set and are appropriate. Add additional Secondary Responders as needed. 
      4. Click the Start button. 
                   Note: This will not notify your reviewers.
         
         

6. Communicate the audit link to Responders: 

1. After completing Step 4 and starting your audit, you will send an email to the reviewers, including the link to the audit that responders will access. https://{customersGathidURL}/#/audit-responses
2. The responders will then be able select the link in the email to respond to their assigned audit items.

Email Template: See Gathid's Audit Release Communication email template here

Responding to an Audit

Selecting a response for “Should Access Continue?”:

• Yes, this will add the action job category Approved.
• Modify, this will add the action Modify Supervisor. (Visible only if your audit is setup to have this additional response option).
• No, will add the action to Remove the job category.

 

FAQ

What to do if my responders cannot login after clicking on the link? 

1. Ensure that they're added to the appropriate access security group in your identity provider to be able to access the review. 
             - The appropriate group must be mapped to the Gathid role: RESPONDER
             - Refer to Knowledgebase Article: Setting up Access to Gathid

 

End of article.