This page contains the setup instructions for using Field Agents for Testing inside a control testing matrix.
Environment requirements
Before you use Field Agents for Testing for the first time, it must be enabled in your firm's environment. Contact [email protected] for more information.
Column and data requirements
To use Field Agents for Testing on a control testing matrix, the sheet must contain the required columns. Depending on the type of testing agent needed for a particular row, you may need to follow additional column and data requirements on that row.
Column name | Type | Data required to run agent on a row | Required for agent type(s) |
Control Activity | Control Activity | Provide the control or requirement to be tested. | All |
| Text | Provide instructions on how testing should be performed to evaluate whether a control is operating effectively. For detailed instructions, see the requirements for test procedures (below). | All |
| Text | The agent writes its results to this column at the end of the run. Do not input any data here. | All |
Documents | Documents | Provide documentation and evidence related to the control’s test. All files must be supported file types for Field Agents for Testing. | All |
Requests | Requests | Include a request with a linked sample sheet containing the population data.
| Population Testing |
Requirements for test procedures
You must populate the testing instructions for the agent to follow in the Agent Test Procedures column. All test procedures should adhere to the following guidelines:
Provide instructions on how testing should be performed to evaluate whether a control is operating effectively.
Start each step with a present tense action verb, such as
inspect,inquire, orobserve.Be specific about what to examine, and why.
Follow the additional requirements below depending on each row’s testing agent type.
General testing requirements
To use the General Testing agent on a row, you must enter all test procedures as a numbered list.
Example general testing procedure:
1. Inspect Production Support policies to determine there is a policy for the identification and triage of systems issues
2. Inspect the Incident Management Policy to determine that there is a policy for necessary internal and external communications
Population testing requirements
To use the Population Testing agent on a row, you must ensure all test procedures follow these requirements, in order:
Enter
Sampling Related Attributes:as a heading on the first line.Enter
Population:followed by the name of the population being tested.Enter
Evidence Required:followed by the name of the evidence document being tested.Enter each test procedure as an item in an alphabetical list.
Example population testing procedure:
Sampling Related Attributes:
Population: New Hire Employees
Evidence Required: Network Access Request Form
A. Inspect the network access request form to ensure it is documented in the standardized format.
B. Inspect the network access request form for evidence of authorization by the hiring manager.
C. Inspect the network access request form to verify that the date of authorization precedes the granting of system access.