Class is mandatory?

[Don Dom]

Hello

I have a question.

GRC can work without CLASSes ? Or they are absolutely mandatory to "live" in GRC ecosystem ?

Can we set up GRC environment and do not use classes at all (only Entities and Entity Types) ?

Cheers.

[Mark Manders]

It's used in several parts of the module, so you will need to check on any logic (and will need to recheck on every upgrade), but GRC is big. And 'class' is used in several tables, not all having the same values/use. Are you talking about a specific table?

[Don Dom]

No, general CLASS usage in GRC

But I see now after digging. they are mandatory:

Especcially for RAM's

I wonder was it any idea about skipping this - but looks like no.

Can GRC classes can be somehow related to CMDB Classes? or this would be only "free imagination" of Risk Manager idea?

Cheers,

[Community Alums]

Hi @Don Dom ,

Firstly, Entity classes are used to add a conceptual information about the entity or to tag the entity. They are used to classify the entities and they represent a collection of entities that have the same attributes

For Doing a Entity Scoping it's very important to have Entity Class > Entity type > Entities ,However, if you have Advanced Risk management,  then while creating the RAM, Applicable entity Classes is mandatory, see below:

Now, If you want to just work with Controls, Audit, policies , Authority document and Classic Risk Management, you can still live with Entity Type and Entities.

[Community Alums]

HI @Don Dom ,