Entity Classes

[Mehernosh Amrol]

I have entity types that come from the same table "cmn_locations" and I have broken them down by a few Countries.  US Offices, Canada Offices, and India Offices.  I created an Entity Class for each and then a Class for Locations, which they all roll up to.  I need guidance on this.

1. Do I need to use Class Rules?
2. Should I have them as different classes?
3. Do I apply the "Locations" Entity Class Rule to all of them, or is there a way for me to have different class rules for each location?
4. What do I do for the "Tier" field/What is the "Tier" field for?

Thanks.

[VaranAwesomenow]

You can create relationship between entity classes to define rollups.

You can associate risk statements and entity types.

Think of tier as a hierarchy, it helps identify which entity class belongs to which tier so the risks and compliance can be better understood and how they rollup to higher tiers.

Therefore, the risks of the entities of tier 3 affect the entities of tier 2 and that in turn affects tier 1

[Eric Feron · Accepted solution]

This might come handy:

Entity Types, Classes and Tiers for GRC: What they are and how to use them (15 minutes).