You have completed the data import process with no errors. You created process, risks, controls, and one perspective. Controls were related to perspectives. You have provided the customer with the Control Manager security role. When the customer logs in to Financials Risk Compliance (FRC), the customer cannot see any controls.
Which step was missed during the import process?

• A. Data security policies for Controls were not created.
• B. The Controls were not related to any risk objects.
• C. The parent process was never approved.
• D. The Control Method was not set to a valid value.

Your client has configured separate roles for control assessor and controlassessment reviewer. The control assessor has submitted his or her assessment. The control assessor realizes later that he or she has forgotten to attach a critical test evidence document to the assessment and needs to attach it now.
How can this be accomplished?

• A. The assessor can request the reviewer to reject the assessment. After the assessment is rejected, the assessor can then attach the document and resubmit the assessment.
• B. On the Manage Assessments page, the assessor canselect the assessment and click the Reopen button.He or she can then attach the document and resubmit the assessment.
• C. On the Assessment tab in the Control definition, the assessor can select the assessment and click the Complete Assessment button. He or she can attach the document and resubmit the assessment.
• D. The assessor can request the reviewer to attach the document during the review.

You havecreated security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
* EMEA P2P Control Manager Job Role
* Seeded Control Manager Duty Composite
* Seeded Control Certification Assessor Duty Composite
* EMEA P2P Control Manager Data Security Policy
* Seeded Control Manager Data Security Policy
* Perspective filter where Region Perspective "equals" EMEA
* Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)

• A. Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.
• B. While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
• C. Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.
• D. Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.

Your customer has a requirement to define an IT Compliance Manager job role with privileges to manage risks and controls, and the issues related to the risks and controls.
What are the duty roles that must be included in this job role to achieve this requirement?

• A. Seeded Risk Manager Composite, Control Manager Composite, and Issue Manager Composite
• B. Seeded Issue Manager Composite and Issue Validator Composite
• C. Seeded Risk Issue Manager and Control Issue Manager
• D. Seeded Issue Manager Composite

Your client needs to perform Design Review and Certification assessment for all their controls. Identify two options that show how this requirement can be met. (Choose two.)

• A. Option A
• B. Option E
• C. Option D
• D. Option C
• E. Option B