GRC Issue Group Rules

[Sabrina10]

I'm looking for more information on the purpose for the Issue Group Rules and how they are used for Controls and Risks.   I wasn't able to find much in the docs site other than references to the field on the forms, but that doesn't meet it isn't there - I just couldn't find it.

Anyone have insight into this?

Thanks

Sabrina

[subir00]

This helps, Thank you.

[Anushree Randad · Accepted solution]

The purpose of issue group rule is to group similar issues together into a parent issue based on conditions defined in the rule, so that you can work on the similar issues at once and close out the parent issue once resolved, which will close out all the child issues. This could be used for issues related to IT controls such as ‘Patch windows servers on Tuesday’. If there are 10 servers that you need to patch and there are 10 controls crated for them and for some reason they are non-compliant and issues are generated for them. All these 10 issues are similar so you can group them together and resolve the parent issue which will close out all the child issues. It makes the issue management better. Thanks, Anushree,

[juliesutton]

Is there a grouping functionality of audit issues?  I see Policy and Compliance and Risk, but not Audit.

[Eric Feron]

Hi Julie, you may want to start a new thread with your question,m to get renewed attention.

Cheers.

[Anushree Randad]

Hi Julie,

The rule only applies to policy statement (control objective) and risk statement today. But you can group audit issues manually, by going to the issues list, and selecting few issues, and clicking on 'Group' list UI action. It will open up a pop up which will help you group those issues. It will also provide you capability to add issues to existing groups. Manual issue grouping works for all issues (compliance/risk/audit). 

Thanks,

Anushree