How should the Citation be Audited?
There are three options that you can choose from in the audit question workflow:
The Citation itself is an audit question
Reference a templated Audit item from the mapped Common Control
There is no audit question
Select The Citation itself is an audit question if any of the following apply:
- The citation is in the form of a question.
- The citation begins with a verb.
- The AD or section of the AD is an Audit Guide.
Select Reference a templated Audit item from the mapped Common Control if the citation does not begin with a verb, but contains an audit question. (i.e. At the conclusion of a security assessment for a system, a plan of action and milestones is produced by the system owner.). The Mapper will spawn an audit question that is linked to the Common Control.
Select There is no audit question if the citation does not contain an audit item.