In addition to Audit Manager, which role should be assigned to allow management of the audit process?

In addition to Audit Manager, which role should be assigned to allow management of the audit process?

• A. sn_grc.manager
• B. sn_audit.user
• C. sn_grc.user
• D. sn_grc.reader

Answer: (A)

Managing the audit process requires broader GRC permissions that cover more than just conducting audits. The sn_grc.manager role adds comprehensive governance, risk, and compliance administration capabilities, which are needed to oversee and control the entire audit lifecycle. With this role, a user can configure audits, manage workflow and assignments, approve steps, adjust scope, handle exceptions, and generate or view audit-related reports across the program. The other roles don’t provide that level of administration: sn_grc.reader is read-only, sn_grc.user is a basic user without full management privileges, and sn_audit.user focuses on performing audit tasks but not on managing the process. Therefore, in addition to Audit Manager, the sn_grc.manager role is the best fit to manage the audit process.

Managing the audit process requires broader GRC permissions that cover more than just conducting audits. The sn_grc.manager role adds comprehensive governance, risk, and compliance administration capabilities, which are needed to oversee and control the entire audit lifecycle. With this role, a user can configure audits, manage workflow and assignments, approve steps, adjust scope, handle exceptions, and generate or view audit-related reports across the program.

The other roles don’t provide that level of administration: sn_grc.reader is read-only, sn_grc.user is a basic user without full management privileges, and sn_audit.user focuses on performing audit tasks but not on managing the process. Therefore, in addition to Audit Manager, the sn_grc.manager role is the best fit to manage the audit process.