Monitors
README
Track and resolve governance-related compliance checks in Sprinto, including risk assessments and management workflows.
Governance & Compliance Monitors
The Governance & Compliance Monitors section helps you track organisational and policy-level controls that are not directly tied to cloud infrastructure or user identity providers. These checks typically align with:
- Risk governance
- Policy enforcement
- Compliance program oversight
They are designed to ensure that your organisation follows a structured, repeatable approach to identifying risks, assigning responsibilities, and maintaining up-to-date security documentation.
What does Sprinto monitor here?
Sprinto automatically evaluates whether your organisation is:
| Check Type | Description |
|---|---|
| Periodic Risk Assessment | Checks if your Risk Register is updated regularly and new risks are assessed. |
| Risk Owner Assignment | Verifies if each documented risk has a designated owner. |
| Risk Treatment Updates | Detects whether mitigation plans or accepted risks are outdated. |
| Policy Acknowledgment | (Planned) Tracks if teams have acknowledged key policies in Sprinto. |
Key Checks and How to Resolve
1. Resolve Sprinto Check for Periodic Risk Assessment
- Go to:
Risk Registerin Sprinto - Update stale risks or add new ones
- Assign owners and update statuses
- Upload evidence via the Risk Register or as supporting docs
Who is responsible for these checks?
| Role | Responsibility |
|---|---|
| Compliance Officer | Coordinates the overall risk assessment process |
| Risk Owners | Maintain individual risks and mitigation progress |
| Infosec / GRC Teams | Provide oversight, alignment with frameworks, and reviews |
| Sprinto Admin | Uploads evidence and updates the platform accordingly |
Evidence Examples
- Screenshots of updated risks in Sprinto
- PDF summary of your latest risk workshop
- Uploaded trackers showing risk prioritisation
- Audit logs of changes to risk entries
Upcoming Additions (Coming Soon)
- Policy acknowledgment tracking
- Policy-to-risk mapping monitors
- Escalation workflows for overdue risks
Glossary
| Term | Definition |
|---|---|
| Risk Register | A list of known risks, their impact/likelihood, and current status |
| Risk Owner | The person responsible for managing or mitigating a particular risk |
| Treatment Plan | Strategy for accepting, mitigating, or transferring a risk |