The internal auditor advised the Control Owner of North America to perform assessment for two P2P controls. Which three steps can the Control Owner…

A Control Owner can initiate assessments for specific controls using two primary methods: impromptu assessments or planned assessments. Impromptu assessments are designed for ad-hoc, unscheduled evaluations of individual controls directly from the control's detail page. Alternatively, the Control Owner can create a planned assessment, which offers a more structured approach. When creating a planned assessment, the scope can be precisely defined to include only the two specific controls required by the auditor, either within a single assessment plan or by creating a separate plan for each control. All three of these options are valid actions the Control Owner can perform to fulfill the auditor's request.

A. This option is incorrect because initiating an assessment for all P2P controls does not meet the specific requirement to assess only the two designated controls.

C. This is an incorrect option because enabling impromptu assessments is a one-time setup and configuration task, typically performed by an Application Implementation Consultant or Administrator, not a routine action performed by a Control Owner to "kick-off" an assessment.

1. Oracle Fusion Cloud Risk Management, Using Risk Management (Release 24A), Chapter 5: Assessments, Section: Impromptu Assessments.

This section states, "You can launch an impromptu assessment of a specific object... from its detail page." This confirms that performing an impromptu assessment (Option B) is a direct action available to a user like a Control Owner for a specific control.

2. Oracle Fusion Cloud Risk Management, Using Risk Management (Release 24A), Chapter 5: Assessments, Section: Create a Plan for a Planned Assessment.

The documentation details the process of creating a planned assessment. In the "Define Scope" step, it specifies that a user can "Select specific objects to be included in the assessment." This supports creating a single planned assessment for the two controls (Option D) or two separate assessments (Option E).

3. Oracle Fusion Cloud Risk Management, Implementing Risk Management (Release 24A), Chapter 3: Set Up Financial Reporting Compliance, Section: Task: Manage Financial Reporting Compliance Objects.

This implementation guide describes the setup for objects, including a checkbox to "Enable impromptu assessment." This task is performed in the Setup and Maintenance work area, confirming it is an administrative configuration (making Option C incorrect as an action for a Control Owner).