Based on our broad experience in the field for many years, Qubus has evolved to a product that is highly configurable supporting the most widespread GRC methodologies. Some examples include:
- IT Governance, Risk and Compliance
- Financial controls management
- Strategic and Operational risk management
- General compliance management
- Internal and external audit management
Some of the used techniques are listed below:
Self-assessment | |
Typical users | Appointed employees of a company who are responsible for reporting for their location/department. Access based on username and password. Respondents are invited to perform the self-assessment and receive a reminder if they have not completed the questionnaire after a certain period of time. Optionally, a manager has to approve the given answers before they are processed. |
Typical controls | A large number of multiple-choice items, with many conditional questions to reduce the questionnaire to relevant parts for each respondent. |
Typical report | Users get a copy of their answers for archiving purposes. They can also obtain a hardcopy of the questionnaire to collect the necessary information before answering questions in Qubus. The ordering client receives an overview of given answers, an exception report to track non-compliant departments and a high-level comparison between groups of respondents. |
Typical duration | Two months. |
Benchmarking | |
Typical users | A fairly large number of professionals gathering information about their own company or about their clients. |
Typical controls | A large number of multiple-choice items subdivided into several chapters, with a few introductory items to create a profile of the assessed object. |
Typical report | Users receive a report showing their object’s score and a comparison with the rest of the population (rendered anonymous). |
Typical duration | Throughout the year, repeated yearly for every object. |
360-degree assessment | |
Typical users | A company’s employees. |
Typical controls | Not too many items; about half of them are open questions. Users perform a self-assessment after which other users fill out the same questionnaire. The results are compared in a face-to-face meeting between the users. |
Typical report | A tabular representation of given answers, possibly with calculated scores per subject of the questionnaire. |
Typical duration | Throughout the year. Users are given two weeks’ time to fill out the questionnaire. |