Which two activities can be performed using Financial Reporting Compliance? (Choose two.)

• A. Continuously monitor financial transactions and role-based remediation of transaction incidents.
• B. Review and approve the accuracy and completeness of control descriptions.
• C. Gain real-time access to live financial data and proactively resolve issues.
• D. Conduct intuitive audits of general ledger balances with journal details.
• E. Provide self-service access to reporting and analysis against financial transactions.
• F. Review control assessment results, along with any effectiveness issues found.

Your customer has a requirement to define an IT Compliance Manager job role with privileges to manage risks and controls, and the issues related to the risks and controls.
What are the duty roles that must be included in this job role to achieve this requirement?

• A. Seeded Risk Manager Composite, Control Manager Composite, and Issue Manager Composite
• B. Seeded Issue Manager Composite and Issue Validator Composite
• C. Seeded Risk Issue Manager and Control Issue Manager
• D. Seeded Issue Manager Composite

You have created security roles for the Procure-to-Pay (P2P) Control Manager for the EMEA region in your client's organization. But, there are two problems with his or her security configuration.
Problem 1: This person should not receive notifications to complete control assessments, but currently he or she does.
Problem 2: Also, although he or she has access to controls associated with EMEA, he or she is unable to access controls created for individual regions within EMEA.
You have given him or her the following job role:
EMEA P2P Control Manager Job Role
Seeded Control Manager Duty Composite
Seeded Control Certification Assessor Duty Composite
EMEA P2P Control Manager Data Security Policy
Seeded Control Manager Data Security Policy
Perspective filter where Region Perspective "equals" EMEA
Perspective filter where Process Perspective "equals" P2P
Which two actions need to be taken to correct the problems? (Choose two.)

• A. Remove Control Certification Assessor Composite from the EMEA P2P Control Manager job role.
• B. While defining data security policy, set the perspective value to EMEA including all child nodes of the EMEA region.
• C. Add to the EMEA P2P Control Manager Data Security Policy the seeded Control Certification Assessor Data Security Policy.
• D. Create EMEA P2P Control Certification Assessor Data Security Policy striped by both EMEA and P2P perspectives and assign to the job role.

How do you associate a risk to a control?

• A. To associate a control to a risk, the control needs to be in the Review state.
• B. On the Related Objects tab of control definition, add the risk.
• C. On the Related Controls tab of risk definition, add the control.
• D. In the related object section of process definition, add the control to the risk.
• E. The only way to create risk-control associations is through data import.

How do you populate the Control Method field with a new custom value, such as a third-party application'?

• A. Enter the new value directly in the Control method field.
• B. Use Lookup Meaning of the new lookup value.
• C. Use Lookup Type of the new lookup value.
• D. Use Lookup Code of the new lookup value.