Management Control Catalog 

Definition

The management control catalog comprises controls that are performed at a higher level, that is, at process group level and organizational unit level. The owners responsible for the respective process group or organizational unit (in other words, owners from management) are responsible for the implementation of these controls.

One example of a management control is a company code of conduct. Managers must ensure that all employees in their areas of responsibility adhere to this code.

Use

Org unit owners and process group owners can choose which management controls in the management control catalog are relevant for them and then specify whether the selected management controls need to be assessed or tested (see Accepting Management Controls).

The management control catalog is compiled by the power user or by the person assigned to the role containing the task Edit Management Control Catalog (EDIT-MCCAT).

Structure

The management control catalog comprises management control groups and, at the lowest level, the management controls. The hierarchies for management control groups can have any number of levels. They are used to lend a structure to the management controls in terms of content. Moreover, you can view at the management control group level the aggregated results for the assessment and test of the subordinate management controls (see Management Control Assessment and Test).

In the expert mode for structure setup, management control groups and management control are represented by one and the same object. The indicator Is Management Control is used to distinguish between group controls and management controls; it is not set for the management control group.

You specify the following attributes in the central catalog for a management control:

·        ID, name, and description of the management control

·        Description of the assessment technique

·        Description of the testing technique

The description of the assessment technique and of the testing technique can be entered by other persons because separate tasks are delivered for the entry of these attributes (see Task Group: Central Structure Setup).