Downstream Entity and Control/Risk inheritance
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
08-01-2024 10:16 AM
Hello,
I'm trying to build a relationship with my Entities (Upstream & Downstream). I have specific Control Objectives for the Parent (Upstream Entity) and then Specific Control Objectives for Child (Downstream Entity). When I add a Downstream Entity, the Controls are then related to the Upstream Entity. I want the Downstream Entity to inherit Controls from the Upstream Entity.
Example
Upstream Entity: ServiceNow
Control OBJ: SN.1, SN.2, SN.3
Downstream Entity: ServiceNow IRM
Control OBJ: SN.IRM.1, SN.IRM.2, SN.IRM.3
When I add ServiceNow IRM as a Downstream Entity to ServiceNow, SN.IRM.1, SN.IRM.2, SN.IRM.3 roll up as "Downstream Controls" with Entity ServiceNow IRM on the ServiceNow Entity form. All Downstream Engagements, Issues, etc. also roll up to ServiceNow. I understand the rolling-up part.
How can I make it where, ServiceNow IRM has (inherits) Control OBJ: SN.IRM.1, SN.IRM.2, SN.IRM.3 AND SN.1, SN.2, SN.3 ?
Any help is appreciated, thank you.