Complete a review and create a report

Completing a review records who checked a requirement, when, and with what result – and optionally produces the review report you later present in the management review or an audit. This article shows the workflow in the ISMS cockpit.

Prerequisites

• At least one list of requirements has been loaded.
• You have permission to edit requirements.
• You are in the detail view of the requirement you have checked – opened from the “ISMS cockpit” or from the detail view of the list of requirements.

Step by step

1. In the detail view of the requirement, click the action to complete the review.
2. Select the result of the review under “Result”.
3. Select the reviewing person under “Reviewer”. This entry evidences the separation of implementation and review during an audit.
4. Add your observations in the “Note” field.
5. Under “Follow-up”, specify when the requirement is due for review again. When due, the follow-up automatically creates a task for the assigned user.
6. Optionally activate “Create a report” and enter the “Date of the report” as well as the report findings.
7. Click “Save”.

Where the report ends up

• The report you created appears in the detail view of the requirement in the “Reports” section.
• The process is logged in the activity history of the requirement (tab “Activities”).
• A changed rating status is immediately reflected in the degree of fulfilment of the “ISMS cockpit”.
• Due follow-ups appear as tasks and in the “Deadlines” tab of the cockpit.

A tip from practice: set the “Follow-up” every time you complete a review – otherwise a checked requirement sits unnoticed until the next audit cycle surfaces it again. The findings in the report are the text you quote in the management review, so word them so that they are understandable without the detail view.