GRC control status not updating

Kristian10 · ‎06-06-2017

Trying to sort out the workings of GRC controls.

Anyone has any ideas or pointers?

Perhaps I'm doing something horribly wrong here, so any help is appreciated

Overview

I can't seem to get a manual Indicator to update the Control's status.

When setting an Indicator Task to "passed", no update is done on the Control.

Setting the Indicator task to "failed", updates the Control to "Non Compliant".

Updating yet another Indicator Task to "passed" does not change the Control status again.

More detailed description:

For testing purposes, I've created:

A Policy with the company as profile type (POL0020008 - Company Happiness)
A Policy Statement in this policy (PARTY1 - Everyone should be invited to the Summer party)
A Control for this Policy Statement (CTRL0020111 - Everyone should be invited to the Summer party)
An Indicator (method type: manual) for this Control (IND0020006 - Check invitation list)
Executed the Indicator to create an Indicator Task
Set Indicator Task to "passed" and state closed
Verified an Indicator Result was created with Passed checked
However, the control is still marked with status "-- None --" as shown below

Executed the same Indicator again
Set Indicator Task to "failed" and state closed
This time, the Control is updated to "Non Compliant"

Executed the same indicator yet another time
Set indicator task to "passed" and state closed
Control is still set to "Non Compliant"

(Running on Istanbul)

moses5 · ‎03-23-2018

I am on Jakarta and first had to upgrade to patch 8 first. Thanks to @SeanBarret

Here is what I think is happening...

When you fail an indicator Task, it sets the Control to "Non-Compliant" and create an Issue Task.

The Issue Task needs to be worked on.

The idea is that you need to Remediate or Accept the reason why its not compliant (in order words fix or accept the issue). If you Remediate and Close the issue, the control will change to compliant. However if you Accept and Close the issue, the control stays at non-compliant.

Hope that helps.

View solution in original post

Kristian10 · ‎03-29-2018

You're spot on! Thanks for clearing that up.

G Balaji · ‎11-03-2018

Hi Moses,

An issue is automatically created when the control attestation is "non-compliant". How is an "issue" associated with indicator?

And when does an "issue" moves to next state?

Is there any articles on this?

Would really appreciate if you could provide some pointers or throw some light on this.

Thanks.

robert_leopold · ‎01-17-2023

I am experiencing this same behavior. The indicator is "last result passed = true" but the control is not updating and remains "non-compliant". Our configuration is not creating "issues" when a control is non-compliant so there is nothing to "clear". I have removed all entity types and the indicator template and restored each so the mapping updates. I've retired the control, reactivated the control and then re-activated the indicator for the control. Still no luck. Not sure how else to resolve. Any suggestions would be appreciated.