Help Center
How can we help?
Step-by-step answers for PVology, written for what you are trying to do.
PVology Governance & Assurance
- Can I attach evidence to a compliance obligation?Not yet. Obligations do not have file attachments. Record where the evidence is kept in the Description or Source or reference field.
- Can I record residual risk in PVology Risk?Not as separate fields yet. The Risk application has one likelihood and one impact rating. Project risks in PVology Projects have Residual probability and Residual impact.
- How evidence is reviewed, expires and is replaced (current, expiring, expired, superseded, rejected)A reviewer opens the evidence's Review tab, chooses Accept or Reject (with a note) and Record review. Evidence is Current, Expiring soon (within 30 days of Valid until), Expired, Superseded by a newer version, or Rejected. Replace it on the Versions tab with Record new version.
- How to add a compliance obligationIn Compliance choose New obligation, enter the Title and optional description, owner, status, category, due date and source or reference, then choose Create obligation.
- How to add a key risk indicator (KRI) to a riskOpen the risk, choose the Key risk indicators tab and fill in Add a key risk indicator: name, where the value comes from (Entered here or A Performance KPI), direction, unit, amber and red thresholds, frequency and owner. Record readings with Record reading.
- How to add a requirement and decide whether it appliesChoose New requirement (or Add a requirement on a source), then open the requirement's Applicability tab and, under Record a decision, choose Applicable, Potentially applicable, Needs review or Not applicable, give the Reason and choose Record decision. Applicability is always a person's decision.
- How to add a risk to the risk registerIn Risk choose New risk, enter the Title, owner, status, category, likelihood, impact and response, then choose Create risk.
- How to add evidence to a control, obligation or findingOpen Assurance → Evidence and choose Add evidence, or choose Add new evidence on the Evidence tab of a control, obligation or finding. Enter the title, type, owner and validity, attach the file (up to 2 MB per upload) or say where it is kept, and choose Record evidence. New evidence waits for a reviewer.
- How to assign an owner to a compliance obligationOpen the obligation, choose the person in Owner and choose Save changes. In an organization the owner must be a member; in a personal workspace the owner is you.
- How to close or archive a riskOpen the risk, set Status to Closed and choose Save changes. To remove it from the open list entirely, choose Archive; it can be restored and is never deleted.
- How to escalate a ProjectOrbit project risk to Governance & AssuranceIn the project, open Registers → Risks (or Opportunities) and choose Escalate to Governance & Assurance on the item. PVology creates one organization risk linked to the project risk; escalating again opens the same risk. The project risk stays in the project.
- How to explore the Governance & Assurance sample from start to finishIn Preferences → Sample data, add the sample "Regional warehouse expansion — Governance & Assurance end to end". It connects a project, an objective, a risk, a requirement, obligations, one shared control, evidence, a control test, a finding and remediation. Sample records are marked SAMPLE and can be removed at any time.
- How to export compliance obligationsIn Compliance choose Export CSV. The file includes all your real obligations, including archived ones, with every field.
- How to get around PVology Governance & AssuranceOpen Applications → Governance & Assurance. The navigation is Overview, My work, Risks, Compliance, Controls, Assurance, Findings & actions, Reports and More. Overview shows what needs attention; My work lists what you own that needs you.
- How to get started with PVology ComplianceOpen Applications → Compliance. It keeps an obligation register: the requirements you must meet, who owns them, their due dates and whether you comply. Choose New obligation to add one.
- How to get started with PVology RiskOpen Applications → Risk. It keeps a risk register: capture risks early, rate likelihood and impact from 1 to 5, and agree a response. Choose New risk to add one.
- How to plan and conclude an assurance activityOpen Assurance and choose Plan an activity: title, type, owner, reviewer, dates, objective and scope, then Plan activity. Add the controls, requirements or obligations to the Scope tab, choose Start the activity, record the work, and conclude it on the Conclusion tab with an overall result and a written conclusion.
- How to raise a finding and plan its remediationChoose Raise a finding in Findings & actions (or Raise a finding from a test), enter the title, type, severity, owner, due date, what was found and the root cause, then Raise finding. On the Remediation tab, save the plan, add actions and, when they are done, choose Mark ready for verification.
- How to rate a risk's likelihood and impactOpen the risk and choose Likelihood (1–5) and Impact (1–5). PVology shows Risk score = likelihood × impact, out of 25.
- How to read the Compliance dashboardThe top of Compliance shows Total obligations and a count for each status. The counts include your real records only; sample records are counted separately.
- How to record a compliance source (law, regulation, contract, standard or policy)Open Compliance → Sources and fill in Record a source: title, type, status, issuer, jurisdiction, version, effective date, a link to the authoritative text and your own summary, then choose Record source. Then add the requirements in it that matter to you.
- How to record a risk response or treatmentOpen the risk, describe the actions in Response / treatment, set Status to Treating while you act or Monitoring when it is under watch, and choose Save changes.
- How to record an opportunity (positive risk)PVology Risk has no separate opportunity type yet. Add it as a risk with a Category such as Opportunity, or use the Opportunities register in a project, or PVology Value for improvement ideas.
- How to request and approve an exception or risk acceptanceIn Findings & actions → Exceptions choose Request an exception: type, reason, start, expiry (required, at most three years), approver, what it is about and a compensating control, then Request approval. The approver opens the Decision tab, chooses Approve or Reject with a note and Record decision.
- How to review due and overdue compliance obligationsThe Obligation register shows each Due date; filter by status or search to focus. PVology Home's Compliance card counts obligations that are overdue or not compliant. There is no separate overdue filter or reminder email yet.
- How to run a control self-assessment checklist in an assurance activityOpen the assurance activity, choose the Assessment tab and choose Start a control self-assessment checklist. Answer the items, choose Save progress or Complete the checklist. The result informs the person who concludes the activity; it concludes nothing on its own.
- How to set your risk appetiteOpen More → Risk criteria and appetite and, under Set appetite for a category, choose the category (empty for all categories), the Highest acceptable level (tolerance), the Appetite statement and who to escalate to, then Save appetite.
- How to set your risk criteria and matrix (3×3, 4×4 or 5×5)Open More → Risk criteria and appetite. Start from the built-in PVology 5×5 or choose Set up criteria with a 3×3, 4×4 or 5×5 matrix, then edit the likelihood and impact labels, the risk levels and the level of every cell, and choose Save criteria.
- How to test a controlOpen the control, choose Testing and effectiveness and choose Plan a test of this control. In the activity, start it, add the test (design or operating, method, sample, steps), record the result with accepted evidence, and conclude. Effectiveness comes only from a concluded activity with accepted evidence.
- How to update the status of a compliance obligationOpen the obligation, choose Open, In progress, Compliant, Not compliant or Not applicable in Status, and choose Save changes. Use Archive to retire it without deleting it.
- How to use the control library and link a control to risks and obligationsOpen Controls and choose New control, or link an existing one from a risk's or obligation's Controls tab with Link a control from the library. One control is recorded once and linked to every risk it mitigates and every obligation or requirement it supports.
- How to use the governance dashboard and the ten governance reportsOpen Reports in Governance & Assurance. Choose Open the dashboard for the governance dashboard, or Generate report on one of the ten governance reports (risk, project risk roll-up, obligations, control effectiveness, assurance, evidence, findings, remediation, exceptions and the executive report), then download PDF, Word or Excel.
- How to verify and close a findingWhen a finding is Ready for verification, a person other than the remediation owner opens Verification and closure, links accepted evidence, chooses Verified, the Method and what was checked, and chooses Record verification. Then Close the finding with a Closure note.
- PVology Compliance: common questionsCompliance needs the application in your plan and, in an organization, a licence. AI help inside Compliance is not available yet. Sample obligations can be added and removed at any time, and Export CSV downloads your records.
- PVology Risk: common questionsRisk needs the application in your plan and, in an organization, a licence. AI help inside Risk is not available yet. Sample risks can be added and removed, and Export CSV downloads your records.
- What PVology AI can and cannot do in Governance & AssurancePVology AI prepares drafts for you to review, such as Improve the risk statement, Find requirements in a passage, Suggest existing controls, Find evidence gaps, Draft a test of this control, Draft findings from the tests and Suggest remediation. Nothing changes until a person accepts an item, and it never rates, decides, concludes, approves or certifies.
Still need help?
PVology Support creates a request for you at once, answers ordinary questions straight away and brings in a specialist when needed.
Contact PVology →