Evidence and Tasks

How to Work with Tasks for Controls

In KCM GRC, you can create tasks for controls to help you manage your ongoing compliance and risk management efforts. As a best practice, we recommend that you create recurring tasks for your controls, but you can also create one-time tasks for your controls. Then, you can assign tasks to users in your organization so the users can submit evidence for your controls.

See the sections below to learn how to create and work with tasks.

Jump to:

Prerequisites for Completing Tasks

Working with One-Time Tasks

Working with Recurring Tasks

Working with Tasks that Use Effective Date Range (EDR)

Prerequisites for Creating Tasks

Before you create tasks for your controls, you will need to complete the actions listed below:

  1. Either create controls for our scoped requirements or risks, or map existing controls to your scoped requirements or risks. For more information, see our How to Create Controls from Scoped Requirements and How to Create and Map Risk Controls articles.
  2. Create user accounts for the individuals in your organization who will be responsible for completing or approving control tasks. When you create user accounts, you can assign user roles to the user accounts based on the responsibilities you would like to give to each user. For example, if a user will only be responsible for completing tasks, you would assign the Contributor user role to that user. For more information, see our How to Create and Manage KCM GRC User Accounts and User Roles Guide articles.
  3. Make sure your users have confirmed their user accounts.

Working with One-Time Tasks

One-time tasks will only occur once and have a specified due date. You can create one-time tasks for situational tasks or tasks that only need to be completed as needed. For example, if an unexpected incident occurs outside of a control's recurring task, you can create a one-time task for the incident. After you create a one-time task, the task will immediately become active in your account, regardless of the task's start date.

See the subsections below to learn how to create a one-time task.

Creating a One-Time Task

To create a one-time task, follow the steps below:

  1. In your KCM GRC platform, select the Controls tab from your navigation panel.
  2. In the Name column, select a control. When you select a control, you'll be taken to the View Control page, and the Recurring Tasks subtab will automatically be selected.
  3. From the Recurring Tasks subtab, click the Create Task button. Create Task Schedule button PNG
  4. Fill out the fields on the Create Task page. For more information, see the screenshot and list below: Create Task Schedule screen PNG
    1. Select Integration: Select an integration to use for the task, or select None. If you select an integration, the fields below will change. For more information, see our KCM GRC Integrations article.
    2. Task Name: By default, the control name will display in this field. You can change the Task Name if you would like for the name to be specific to the task. The character limit for this field is 255 characters
    3. Task Description: By default, the control description will display in this field. You can change the Task Description if you would like for the description to be specific to this task. The character limit for this field is 10,000 characters.
    4. User Assigned: Select the name of the user who will be responsible for completing the task. This user will receive task reminder email notifications from KCM GRC. For more information about task notifications, see the Control Task Notifications section of our Email Notifications and the Email Digest article.
      Note: If a user group is assigned to the control that the task was created for, only members of that user group will display in this drop-down menu. To learn more about user groups, see our How to Work with User Groups article.
    5. Evidence Requirements: Select the type of evidence that you would like the user to submit. For more information, see the list below:
      • If evidence is not required for the task, select No Evidence.
      • To give the user the option to submit a link or upload a file as evidence, select Document and Link.
      • To only give the user the option to submit a link as evidence, select Link.
      • To only give the user the option to upload a file as evidence, select Document.
        Note: You may not have one of the evidence requirements listed above if you've restricted the evidence that is allowed for the scope or your account. For more information, see our How Can I Limit the Types of Evidence That Users Can Submit? article.
    6. Task Frequency: Select One Time.
    7. Due Date: From the calendar, select a due date for the task. The task evidence should be submitted on or before this date. For one-time tasks, the due date also determines the task's start date and end date.
      Tip:You can select any date in the future. To select a year, click the month and year link at the top of the calendar, click the current year in the pop-up window, and then select a year from the list. To select a month, click the month and year link at the top of the calendar, and then select a month from the list (click to view).
    8. Approving Manager (Optional): Select the name of the user who will be responsible for approving the task evidence before the task can be closed. This user will receive an email notification when the task is ready for their approval. For more information, see our How to Monitor and Approve Tasks article.
    9. Second-level Approving Manager (Optional): Select the name of the user who will be responsible for approving the task evidence after the Approving Manager. This user will receive an email notification when the task is ready for their approval. For more information, see our How to Monitor and Approve Tasks article.
  5. Click the Create button to save the task.

Working with Recurring Tasks

In most situations, we recommend that you create recurring tasks instead of one-time tasks or tasks that use Effective Date Range (EDR). When you create recurring tasks, the task will automatically recur based on the frequency that you select.

See the subsections below to learn about creating a recurring tasks, when tasks become active in your account, and task frequencies.

Creating a Recurring Task

To create a recurring task, follow the steps below:

  1. In your KCM GRC platform, select the Controls tab from your navigation panel.
  2. In the Name column, select a control. When you select a control, you'll be taken to the View Control page, and the Recurring Tasks subtab will automatically be selected.
  3. From the Recurring Tasks subtab, click the Create Task button. Create Task Schedule Button PNG
  4. Fill out the fields in the Create Task pop-up window that opens. For more information, see the screenshot and list below: Create Task Schedule Page PNG
    1. Select Integration: Select an integration to use for the task, or select None. If you select an integration, the fields below will change. For more information, see our KCM GRC Integrations article.
    2. Task Name: By default, the control name will display in this field. You can edit the Task Name if you would like for the name to be specific to the task. The character limit for this field is 255 characters.
    3. Task Description: By default, the control description will display in this field. You can edit the Task Description if you would like the description to be specific to this task. The character limit for this field is 10,000 characters
    4. User Assigned: Select the name of the user who will be responsible for completing the task. This user will receive task reminder email notifications from KCM GRC. For more information about task notifications, see the Control Task Notifications section of our Email Notifications and the Email Digest article.
      Note: If a user group is assigned to the control that the task was created for, only members of that user group will display in this drop-down menu. To learn more about user groups, see our How to Work with User Groups article.
    5. Evidence Requirements: Select the type of evidence that you would like the user to submit. For more information, see the list below:
      • If evidence is not required for the task, select No Evidence.
      • To give the user the option to submit a link or upload a file as evidence, select Document and Link.
      • To only give the user the option to submit a link as evidence, select Link.
      • To only give the user the option to upload a file as evidence, select Document.
        Note: You may not have one of the evidence requirements listed above if you've restricted the evidence that is allowed for the scope or your account. For more information, see our How Can I Limit the Types of Evidence That Users Can Submit? article.
    6. Task Frequency: Select how often the task will occur. You can select a frequency based on how often your organization needs to submit evidence for the control. For more information about task frequencies, see the Recurring Task Frequencies section below.
    7. Due Date: From the calendar, select a due date for the first recurring task. For each task after this task, the start date, end date, and due date will share the same date. For more information, see the Recurring Task Frequencies section below.
      Tip:You can select any date in the future. To select a year, click the month and year link at the top of the calendar, click the current year in the pop-up window, and then select a year from the list. To select a month, click the month and year link at the top of the calendar, and then select a month from the list (click to view).
    8. Approving Manager (Optional): Select the name of the user who will be responsible for approving the task evidence before the task can be closed. This user will receive an email notification when the task is ready for their approval. For more information, see our How to Monitor and Approve Tasks article.
    9. Second-level Approving Manager (Optional): Select the name of the user who will be responsible for approving the task evidence after the Approving Manager. This user will receive an email notification when the task is ready for their approval. For more information, see our How to Monitor and Approve Tasks article.
  5. Click the Create button to save the task.

When Do Recurring Tasks Become Active in My Account?

When you create a recurring task, the task will immediately display under the Recurring Tasks subtab of the View Control page. The first recurring task will become active in your account after you create the task. This task will display in the All Tasks subtab of the View Control page. You can also view this task from the Tasks page.

After the first task, the following tasks will become active the day after the previous task's end date. Then, each task will display in the All Tasks subtab of the View Control page and on the Tasks page when it becomes active. To learn more about the start and ends dates, see the Recurring Task Frequencies section below.

Recurring Task Frequencies

When you create a recurring task, you can select a frequency from the Task Frequency drop-down menu. The frequency will determine how often the task recurs.

To learn how the different task frequencies work, see the table below:

Task Frequency Description Start Date End Date Start Date of the Next Task
Weekly The task will recur every seven days.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's Start Date.

For example, the task would end on July 1, 2022.

The next task will start seven days after the previous Start Date and End Date.

For example, the next task would begin on July 8, 2022.

Monthly The task will recur every month.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's Start Date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, one month after the previous task's Start Date and End Date.

For example, the next task would begin on August 1, 2022.

Bimonthly The task will recur every other month.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, two months after the previous task's start date and end date.

For example, the next task would begin on September 1, 2022.

Quarterly The task will recur every three months.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, three months after the previous task's start date and end date.

For example, the next task would begin on October 1, 2022.

Semiannually The task will recur every six months.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, six months after the previous task's start date and end date.

For example, the next task would begin on January 1, 2023.

Annually The task will recur once every year.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, one year after the previous task's start date and end date.

For example, the next task would begin on July 1, 2023.

Every Two Years The task will recur every other year.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, two years after the previous task's start date and end date.

For example, the next task would begin on July 1, 2024.

Every Three Years The task will recur once every three years.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, three years after the previous task's start date and end date.

For example, the next task would begin on July 1, 2025.

Every Five Years The task will recur once every five years.

The first task will begin on the due date that you set.

For example, you could set a date of July 1, 2022.

The task will end on the same date as the task's start date.

For example, the task would end on July 1, 2022.

The next task will start on the same day, five years after the previous task's start date and end date.

For example, the next task would begin on July 1, 2027.

Working with Tasks That Use Effective Date Range (EDR)

Tasks that use Effective Date Range (EDR) are like normal tasks. However, we typically only recommend using EDR if the task only covers a specific date range. For example, if the evidence that the user submits is only effective for one week and will require new evidence each week, you could use EDR for the task. Tasks that use EDR also have a set time period that users can submit evidence after each task's end date.

See the sections below to learn about creating a task that uses EDR, when EDR tasks become active in your account, and EDR task frequencies.

Creating a Task That Uses EDR

To create a task that uses EDR, follow the steps below:

  1. In your KCM GRC platform, select the Controls tab from your navigation panel.
  2. In the Name column, select a control. When you select a control, you'll be taken to the View Control page, and the Recurring Tasks subtab will automatically be selected.
  3. From the Recurring Tasks subtab, click the Create Task button.
  4. In the Create Task pop-up window that opens, enable the Use Effective Date Range option.
    Note:This option will be unavailable if Effective Date Range is disabled under your Account Settings. For more information, see our How to Manage Your KCM GRC Account Settings article.
  5. Fill out the fields on the Create Task page. For information about the fields that EDR will affect, see the screenshot and list below. For information about the remaining fields, see the Creating a Recurring Task section above.EDR Settings
    1. Task Frequency: Select the frequency for the task, which will affect how often the task will occur and the date range when users should submit evidence. For example, if you select the Monthly frequency and set a start date of July 7, 2022, the task will be open from July 7, 2022 until August 7, 2022, and the next task will also begin on August 7, 2022. In this example, the User Assigned should submit evidence between July 7, 2022 and August 7, 2022. For more information about the task frequency, see the EDR Task Frequencies section below.
    2. Start Date: From the calendar, select the date that the task will start. Together, the task's Start Date and Task Frequency will determine the end date for the task. If you select a frequency other than One Time, the first task's end date will be the start date for the next task. For more information, see the EDR Task Frequencies section below.
      Tip:You can select any date in the future. To select a year, click the month and year link at the top of the calendar, click the current year in the pop-up window, and then select a year from the list. To select a month, click the month and year link at the top of the calendar, and then select a month from the list (click to view).
    3. Due After: Select the length of time that the user will be able to submit evidence after the task's end date. If the task is recurring, this length of time will apply to each task and will their due dates. For more information, see the EDR Task Frequencies section below.
  6. Click the Create button to save the task.

When Do EDR Tasks Become Active?

When you create a task that uses EDR, the task will immediately display under the Recurring Tasks subtab of the View Control page. However, the task will not be active in your account until the task's start date. Then, this task will display in the All Tasks subtab of the View Control page and on the Tasks page.

If the task is recurring, the tasks after the first task will become active on their start date. Then, each task will display in the All Tasks subtab of the View Control page and on the Tasks page when it becomes active.

EDR Task Frequencies

When you create a task that uses EDR, you can select a frequency from the Task Frequency drop-down menu. The frequency will determine how often the tasks recur.

To learn how the different task frequencies work, see the table below:

Note:*End Date: For tasks using EDR, the end date is not the same as the due date for task evidence. The due date will depend on the option that you selected in the Due After field when you created the task. For more information, see the Creating a Task Using Effective Date Range section above.
Task Frequency Description Start Date Task Duration End Date* Start Date of the Next Task
Weekly The task will recur every week. For example, you could set a date of July 6, 2022. The task is open for seven days. For example, the task would end on July 13, 2022.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on July 13, 2022.

Monthly The task will recur every month. For example, you could set a date of July 6, 2022. The task is open for one month. For example, the task would end on August 6, 2022.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on August 6, 2022.

Bimonthly The task will recur every other month. For example, you could set a date of July 6, 2022. The task is open for two months. For example, the task would end on September 6, 2022.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on September 6, 2022.

Quarterly The task will recur every three months. For example, you could set a date of July 6, 2022. The task is open for three months. For example, the task would end on October 6, 2022.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on October 6, 2022.

Semiannually The task will recur every six months. For example, you could set a date of July 6, 2022. The task is open for six months. For example, the task would end on January 6, 2023.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on January 6, 2023.

Annually The task will recur once every year. For example, you could set a date of July 6, 2022. The task is open for one year. For example, the task would end on July 6, 2023.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on July 6, 2023.

Every Two Years The task will recur every other year. For example, you could set a date of July 6, 2022. The task is open for two years. For example, the task would end on July 6, 2024.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on July 6, 2024.

Every Three Years The task will recur once every three years. For example, you could set a date of July 6, 2022. The task is open for three years. For example, the task would end on July 6, 2025.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on July 6, 2025.

Every Five Years The task will recur once every five years. For example, you could set a date of July 6, 2022. The task is open for 5 years. For example, the task would end on July 6, 2027.

The next task will start on the same day as the previous task's End Date.

For example, the next task would start on July 6, 2027.

Can't find what you're looking for?

Contact Support