Hi, We want to automatically schedule evidence requests to our control owners every month. The evidence is being reviewed and approved, which then impacts the control state (compliant / non-compliant). There are multiple ways we can go about this:Con...
I have an indicator template that has a collection frequency of Daily. The indicator is actually running and moving my controls to non-compliant correctly (GRC indicator nightly run scheduled job is active). The problem I am seeing is that the "Ne...
I am looking for a way to show more than 6 fields/columns for the BCM Dependency Assessments within the BCM Workspace, has anyone had any success with this?I have not had any success using the grid configurations or list views, even though they are s...
how to make field read only on a particular condition through data policy which are already mandatory through data policy.!!
I am experienceing some weirdness around my indicators in GRC. I have some control indicators set up - they are a type "Basic". They essentially check to see if the name of the entity the control is for starts with the letter A. The indicators do...
I am trying to create Issue report with master data to be shown from Authority Documents table but when I try to pull the data beyond Control Objective table, I get blank values. I realise that there is an M2M table in between for Control Objective a...
Hi, I noticed that Compliance Reader role is not able to read Attestations at all. However, Compliance User role is able to read Attestations. On one hand it makes sense to limit access to the Attestations, as info about non-compliant controls pose a...
Hello We are using GRC to create sets of attestations. Then the attestation respondent needs to group them into a single grouped assessment. When the Grouped Assessment is created, the questions are in different order than desired. For instance, t...
How are the Internet ALE and ARO calculated after migrating to Advanced Risk?These fields on the risk statements are also not visible, curious as to how all the risks and scores are calculated in advanced risk.
For IRM professional, the pricing guide mentions "limited" for Advanced Risk . Unfortunately, 'Limited' is not defined anywhere. What exactly are the limitations in the professional license for advanced risk?
Hello, We are trying to improve our GRC assessment process by allowing users to take the assessment directly from the Risk. The issue is there can be multiple respondants to the Risk and therefore multiple assessment instances. We have the code to d...
I am trying to build a RAM (Risk Assessment Methodology) in which I want to have dependency between the factors (questions). For example, if user responds to a question as 'Yes', then we want to show additional questions to the user. Please suggest o...
I have developed a number of RAMs using Qualitative scoring and making use of Qualitative Transformation Criteria and each time I do so I try to figure out what OVERRIDDEN means in the context of Qualitative criteria. I have had it explained to me by...
I am getting this error, when i hit Perform Inherent Assessment button In risk assessment methodologies , although it is published. How do i fix this issue ? @Gunjan Kiratkar@Community Alums
The inherent assessment could not be initiated as the approver is not available. Please contact your administrator to review the risk identification configuration and then try to initiate the assessment again. Although the risk manager is available. ...
