I have a problem with the implementation, I'm going to explain it: The model of risk administration of my client is based in "Causes", I mean, 1 risk could have 1 or more Causes, and these are related with controls too. In this case (Causes related w...
Has anyone done the migration from Legacy GRC to the new separate modules? We're interested in doing so, but need to come up with an estimated LOE for our project plan. We are aware of the migration tool, but there are several functions of Legacy...
Hi, I'm having trouble getting the sysId on the context.props in the UI Builder.My requirement is to have a dynamic stepper to fetch the state from the current record.In one page its working fine, but in another it isn't. The sysId is already part of...
Using the Evidence Collection, I wanted to add the Evidence and Related Evidence Tabs to my Control Objective, Entity, Control, etc. I saw this in the GRC Implementation Lab Instance and thought it would be useful to have in my Instance so my users ...
Hi, We want to automatically schedule evidence requests to our control owners every month. The evidence is being reviewed and approved, which then impacts the control state (compliant / non-compliant). There are multiple ways we can go about this:Con...
I have an indicator template that has a collection frequency of Daily. The indicator is actually running and moving my controls to non-compliant correctly (GRC indicator nightly run scheduled job is active). The problem I am seeing is that the "Ne...
I am looking for a way to show more than 6 fields/columns for the BCM Dependency Assessments within the BCM Workspace, has anyone had any success with this?I have not had any success using the grid configurations or list views, even though they are s...
how to make field read only on a particular condition through data policy which are already mandatory through data policy.!!
I am experienceing some weirdness around my indicators in GRC. I have some control indicators set up - they are a type "Basic". They essentially check to see if the name of the entity the control is for starts with the letter A. The indicators do...
I am trying to create Issue report with master data to be shown from Authority Documents table but when I try to pull the data beyond Control Objective table, I get blank values. I realise that there is an M2M table in between for Control Objective a...
Hi, I noticed that Compliance Reader role is not able to read Attestations at all. However, Compliance User role is able to read Attestations. On one hand it makes sense to limit access to the Attestations, as info about non-compliant controls pose a...
Hello We are using GRC to create sets of attestations. Then the attestation respondent needs to group them into a single grouped assessment. When the Grouped Assessment is created, the questions are in different order than desired. For instance, t...
How are the Internet ALE and ARO calculated after migrating to Advanced Risk?These fields on the risk statements are also not visible, curious as to how all the risks and scores are calculated in advanced risk.
For IRM professional, the pricing guide mentions "limited" for Advanced Risk . Unfortunately, 'Limited' is not defined anywhere. What exactly are the limitations in the professional license for advanced risk?
Hello, We are trying to improve our GRC assessment process by allowing users to take the assessment directly from the Risk. The issue is there can be multiple respondants to the Risk and therefore multiple assessment instances. We have the code to d...