How can I change the control state directly from "draft" to "monitor"

[Martin32]

Hi,

We have discovered that due to an scheduled task some controls which were already attested this year were triggered by a nightly scheduled job to put the controls in attestation,

We now want to cancel those attestations but also put them in monitor mode as we already have done for numerous other controls.

I discovered that this is not included in our current options, how can I change this to avoid some recurring tasks to be concluded?

Kind regards,

Martin van Dommelen

+31620517380

[Ashutosh Munot1]

Hi,

First thing is the scheduled job brings this controls back to attest from monitor as per condition.

Second you can now use background script to just put them in monitor state.

Thanks,
Ashutosh

[Martin32 · Accepted solution]

Hi Ashutosh,

Thanks for your reply (again) 😉

For the first thing, we indeed discovered a script moving controls back to attest, in our case this was from Review state to attest state. The review state is included to enable central security to assist in validating.

As we move towards a self assessment to review activity can be bypassed, for which we want to introduce.

For the second part, do you have any links how we can define the script to enable this on a per entity basis.  

Kind regards,

Martin

[Ashutosh Munot1]

Hi Martin,

Can you tell me the condition when this should go to monitor and who will do this?

So i can provide a script and where to write that,

Thanks,
Ashutosh

[Martin32]

Hi Ashutosh,

Thanks for your reply:

The condition under which we select the controls is to be concluded by a security office and per entity and selection of controls (if possible). Thoughts behind this is that due to a configuration error a "run date" triggered new attestations to be initiated for a Business Unit (entity), if we cancel these attestation as a compliance manager the controls are put back in draft and we can not change the control state to monitor as compliance manager.  

The compliance manager role should be able to change this. 

Going forward we might want to be able to bypass the review stage permenantly as we want to rely on self attestations.

Many thanks in advance and if you need anything pleae let me know.

Kind regards,

Martin van Dommelen