The Assurance Picture answers one question: how much of the risk reduction your assessments rely on is proven by testing? Open it from Testing → Assurance Picture.
Each control is one of
State | Means |
|---|---|
Proven | Relied on, and its latest test was Effective and is in date. |
Contradicted | Relied on, but its latest test was Partially or Not effective, and the assessment hasn't caught up yet. |
Unproven | Relied on, but never tested or the test is out of date. |
Not relied on | Not confirmed this cycle, so the assessment doesn't depend on it. |
The headline
"X% of the risk reduction your assessment relies on is proven by testing", weighted by how much risk each control holds back. Next to it, a plain count ("41 of 60 controls tested in date") and the Contradicted count in red, which links to the list.
Below
The trend by quarter, from the snapshots.
Breakdowns by risk type and by unit.
Where testing would help most - the ten controls whose testing would add the most proof, linking to the Back-Log.
See also
Proven only on the Overall Risk Picture shows residual risk counting only proven controls.