
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-08-2022 04:11 AM
Hi,
Can we automatically assign control objectives to entity base on trigger conditions.
For example, the computed inherent risk > 6, it should create a control objective to its entity.
Is this possible in GRC? If yes, what functionality in GRC should I use?
Thanks in Advance,
Tadz
Solved! Go to Solution.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-09-2022 01:09 AM
Hi Tadz,
You have to work this out on your own, we dont have anything as of now Out of the box for it.
What you could do:
1. Open a Control Objectives
2. In the related list, you have an option to add 'Additional Entities'.
3. You can try to insert the respective entity to this list using scripts based on your trigger condiitons (sn_grc_m2m_content_profile is the table).
Other option is to create an entity type and have the respective control objective in it. Adjust the Entity filter of this entity type as per your trigger condition so once the trigger condition is met, your entity gets added to the entity type and hence a control gets created for the control objectives part of the entity type.
Hope this helps!
Ashik
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
‎02-09-2022 11:57 AM
Do you have an Entity Type for high-risk Entities? If so, you can assign the higher-risk Control Objectives and put a filter pointing to the Entity Table say Inherent Risk is [Your criteria]. You may have to put in multiple OR statements.
The other way I could suggest is flow-designer, but I feel if you have an Entity Type, you can also see how many Entities are in that type and it's cleaner than adding individual Controls/Risks to Entities.
I hope this helps.