Not every control needs testing as often. Conform works out each control's criticality from one question: what would happen if this control failed?
Criticality | If it failed… |
|---|---|
Key | the unit would go outside your risk appetite, or up a band from High |
Standard | the risk would rise noticeably |
Minor | the risk would barely move |
Open the list from Testing → Control Criticality.
What's on it
Every control on your in-scope units, with its criticality, its weight (how much risk it holds back), how often it's tested, its latest test and when the next one is due. Click a row for its summary; use Test it to test it now, or Checklist to see what's checked.
Overriding
If you know better (the control is more critical than the numbers suggest, say), use Override to change its criticality, frequency or next due date, with a reason. Overrides are flagged for review when the underlying numbers change, rather than silently kept.
When it changes
Criticality is recalculated when the unit is re-assessed or your appetite changes.