You are gathering requirements on how your client performs control assessments. Which three tasks should you complete to set up assessments in Financial Reporting Compliance? (Choose three.)

You are advising your client on design and configuration related to how access incident results will be viewed and managed. The client has provided a list of business requirements:
* Incident results can be viewed by Department
* Groups of investigators receive assigned incidents based on Department
* Must ensure systematically that no incident is unassigned to an investigator Which three must be configured to support these requirements? (Choose three.)

Your client has configured separate roles for control assessor and controlassessment reviewer. The control assessor has submitted his or her assessment. The control assessor realizes later that he or she has forgotten to attach a critical test evidence document to the assessment and needs to attach it now.
How can this be accomplished?

Which statement related to Advanced Access Controls is true?

Which two steps are required to set up two levels of approval for new controls, which are added after the initial import? (Choose two.)