Check-Control-Survey

Functionality

Check-Control-Survey is a stand-alone module in the iFACTS platform. It can be connected and used by other entities in the platform, e.g. organization, process, external supplier, strategy, business plan.

A Program is created for the intended activity with periods when it is to be performed and archived until completed. The structure is created by questions and categories, follow-up questions, answer options, data entry, weighting, information fields.

The next step is to distribute the program. It can be to an organizational part, person, asset, external supplier. It can also be distributed via classification and categorization.

Before the mailing, it is possible to create templates such as email or where it is to be published.

During the response period, a portal is used to continuously monitor the progress and how the result evolves.

Results are compiled via the iFACTS reporting tool.

Control program / self-assessment

Several different types of control programs can be created within, e.g. self-assessment, ISO27001, internal control, work environment.

In self-assessment, a set of predefined requirements or controls within the area is usually linked. These can be information security controls from ISO27001, or controls linked to legal requirements within the work environment.

In Internal Control, the controls are usually linked to risks as a basis for which controls are to be used.

The controls are set up in a Program and distributed to relevant parts of the business and can be continuously monitored and compiled for results.

Inspection and regulatory supervision

Inspections are often used in the insurance industry as a basis for insurance premiums. Regulatory supervision is an area where authorities carry out supervision in, for example, animal control, restaurants or the environment.

Insurance inspections are often carried out by an authorized risk engineer who, based on a questionnaire, analyzes the business, plant and factory. Each question is weighted on the basis of answer alternatives and a so-called risk score is calculated for the facility. Recommendations, deviations and evidence can also be linked to each question. An EML value (Estimated Maximum Loss) is calculated, which is the basis for the insurance premium.

Regulatory supervision is often based on a number of predefined issues and is performed by the authority’s supervisor. It can be seen as an approval process. If no remarks, the business can continue. If there are remarks, it can worst case lead to the closure of the business or various types of injunctions.

Survey - Questionnaire

Surveys follow the same principle of asking questions to a group of people, distributing, answering, monitoring and compiling results.

Surveys occur in many different areas with several different purposes such as quality, analysis, decision basis, employee and customer questionnaires. All of these can be set up in the iFACTS platform linked to the relevant entity.

Logic flow

Check-Control-Survey can also be used as a basis for categorization and grouping.

Questions are created with different answer alternatives, for example in confidentiality, degree of criticality or accessibility. Based on these questions, the business is analyzed from several different perspectives, generating grouping or classification based on the answers.

If the end result is “Business Critical HIGH”, a number of requirements and routines are linked to ensure that the organizational part is handled correctly.