Control effectiveness reviews

Review whether your controls are actually working

Putting a control in place is not the same as proving it works. Reviews schedule structured effectiveness checks on your controls and rate them over time, so you can show a regulator your controls are working, not just that they exist. The same flow reviews and approves the policies and decisions behind them.

Book a demo

woman working comfortably on a laptop in a warm office setting

Control effectiveness reviews

Review whether your controls are actually working

Book a demo

Control effectiveness reviews

Review whether your controls are actually working

Book a demo

A tight, clean shot of a single monitor on a tidy desk, with a person's hand visible at the edge of frame — one finger on the mouse, mid-click. The monitor shows a report generation interface: a list of report templates or sections with toggle switches, a date range selector, and a prominent generate button at the bottom — visible in structure and colour but not legible.

Control effectiveness

Review the records that need a check

Schedule periodic or triggered reviews of your controls and rate their effectiveness, so a control put in place last year is checked against how work actually is now, rather than assumed to still be doing its job.

ASSIGNED AS REVIEWER

Get assigned as the reviewer by your team

People in your organisation can assign you as the reviewer of a control, policy, or triage decision, so the right person is asked to check it and it does not sit unowned.

Three printed reports fanned out on a warm timber boardroom table, each clearly distinct in format and density — one is concise and executive-summary-style with large summary blocks and a chart, one is detailed with dense structured sections and tables, and one is mid-length with coloured status indicators and a timeline. All three are printed on clean white paper, face-up, partially overlapping, clearly different versions of reporting on the same subject for different readers. A hand is visible at the edge of frame, placing or adjusting the third report.

A sequence of three people in a bright, open-plan office, each at their own desk, captured in a single wide frame with a shallow plane of focus that moves through the space. In the foreground, a WHS coordinator in her early 30s is looking at her screen with a focused expression, clearly reviewing something. In the middle ground, a HR director in his mid-40s is leaning back slightly, reading his screen with an approving nod. In the background, a CFO in her late 50s is reaching for a document on her printer — the final output arriving. The three are not interacting with each other. Each is at their own stage of the same process, separated by space and by the depth of field. The scene captures the feeling of a structured review chain — the report moves through defined approval steps before it reaches the board, with each reviewer seeing the version relevant to their role.

APPROVE & SEND FOR SIGNING

Approve a record and send it off for signing

Once you have reviewed a record you can approve it and send it off for signing, so the path from review, to approval, to an acknowledged policy is one continuous flow.

See how sign-offs work

GOT QUESTIONS?

Frequently asked questions

What does the Reviews module do?

Reviews lets you schedule structured checks on whether your controls are actually working and rate their effectiveness over time, rather than assuming a control put in place last year is still doing its job. Control effectiveness is a question regulators ask, and Reviews keeps the answer current and evidenced.

Can I route a policy or process for approval before it goes live?

Yes. You can send a new policy or process to the people who need to approve it, such as an executive sponsor or the legal team, and they review and approve it inside the platform. ReFresh tracks what was reviewed, who it was assigned to, and who completed the review.

How does this connect to the rest of the platform?

Reviews can sit over a control, a policy, or a triage decision. For example, one person can triage an incident and assign it to a colleague to review before the investigation begins, so there is a second set of eyes and a record of the check.

Why does rating control effectiveness matter for compliance?

Identifying a hazard and putting a control in place is only part of the duty. You also have to show the control is effective and review it as conditions change. Reviews captures that ongoing assessment so your compliance posture reflects reality, not a point in time.

GOT QUESTIONS?