Can we automatically assign control objectives to entity base on trigger conditions

Tadz
Tera Guru
Tera Guru

Hi,

Can we automatically assign control objectives to entity base on trigger conditions.

For example, the computed inherent risk > 6, it should create a control objective to its entity.

Is this possible in GRC? If yes, what functionality in GRC should I use?

Thanks in Advance,

Tadz

1 ACCEPTED SOLUTION

Ashik3
Tera Expert

Hi Tadz,

You have to work this out on your own, we dont have anything as of now Out of the box for it. 

What you could do:

1. Open a Control Objectives 

2. In the related list, you have an option to add 'Additional Entities'. 

3. You can try to insert the respective entity to this list using scripts based on your trigger condiitons (sn_grc_m2m_content_profile is the table).

Other option is to create an entity type and have the respective control objective in it. Adjust the Entity filter of this entity type as per your trigger condition so once the trigger condition is met, your entity gets added to the entity type and hence a control gets created for the control objectives part of the entity type.

 

Hope this  helps!

Ashik

View solution in original post

5 REPLIES 5

Mehernosh Amrol
Giga Guru

Do you have an Entity Type for high-risk Entities?  If so, you can assign the higher-risk Control Objectives and put a filter pointing to the Entity Table say Inherent Risk is [Your criteria].  You may have to put in multiple OR statements.

The other way I could suggest is flow-designer, but I feel if you have an Entity Type, you can also see how many Entities are in that type and it's cleaner than adding individual Controls/Risks to Entities.

I hope this helps.