Audit Management Terminology Guide

The following terminology is used throughout OneTrust's Audit Management module and documentation.

Term

Description

Audit Approver

The individual(s) responsible for approving an audit.

Auditor

The individual(s) responsible for performing and completing an audit.

Audit

A project that holds in-scope workpapers and findings that are documented as part of the audit.

Control Implementations

Controls that have been created against inventories (assets, entities, processing activities, vendors)

Controls

The requirements used by process owners to insure organizational adherence to the policies, standards, and frameworks. Controls are used to define requirements which are put into place to avoid risks, errors, or to define measures that will take place if an error or risk is found.

End Date

The date by which the audit must be completed.

Finding Action Plan

The plan to mitigate the issue and/or compliance gap going forward that was identified by an auditor.

Finding Type

The specific finding type. Current options include - Major Finding, Minor Finding, Non-Conformity, or Opportunity for Improvement. These can be customized based on your needs.

Findings

An issue and/or compliance gap identified by an auditor on the audit or workpaper.

Interview Result

The interview result of the workpaper. Can be used to document control test of design.

Sampling Result

The sampling result of the workpaper. Can be used to document sampling methodology and approach.

Scope

The list of controls that are associated with the audit during creation. Each control generates a workpaper.

Standard / Framework

The standard or framework with which audits are associated with.

Start Date

The date in which the audit was started.

Statement / Goal

The goal or purpose of the audit.

Testing Result

The testing result of the control. Can be used to document test of effectiveness.

Workpaper

A central location to document control testing results. Auditors can collect evidence and manage control testing collaboration and tasks on workpapers.