Privileges are assigned to each audit, and roles are definable by each customer, assigning access rights to a role from basic question answering to full audit manager responsibility.
iQSM creates a risk register, with each risk linked to a mitigation plan that includes the value of the risk, the business impact and provides variable cost options.