How can I trigger risk assessment initiation with scheduled jobs?

[Oshikata1]

Hi, all,

If anyone has the experience that the risk assessment is initiated with a risk assessment scheduler, I'd like to know how the "initiate later" option works.

I configured the risk assessment scheduler. And I turned on "Initiate later" then specified the future date. In this case, the risk assessment should be triggered by the scheduled job "GRC: Bulk trigger assessments from future dated schedules". But this risk assessment has not been initiated.

So, I have the following questions.

When I configured the risk assessment scheduler without the "Initiate later" option, assessable entities and risk assessment instances were created immediately.

But when I turned on the "Initiate later" option, only assessable entities were created. I imagined that the risk assessment instance might be created on the scheduled date/time, then the risk assessment is started.

But risk assessment instances were not created. Of course, risk assessment was not started.

Should I add risk assessment instances to assessable entities manually if I'd like to use the "Initiate later" option?

If anyone has the same issue or experience, can you kindly share your solution with me?

Thanks,

Oshikata

[Sebastien Fix]

Did you prepare a Risk Assessment Scope against the Entity or had mapped risk statements against the entity beforehand?

I need to wait until tomorrow to see the result of my scheduler, but without "Initiate later" I get the message that "This action would initiate the risk assessments for all mapped risks for the selected entities. Do you want to initiate the assessments?"

So if you didn't map Risks beforehand, there wouldn't be any RASMT records to initiate to change State from"Not Initiated" to "Ready to Assess"

Fron Script Include "RiskAssessmentScopeUtilsBase"

[Oshikata1]

Hi, Sebastien san,

Sorry for my late reply. Yes, I mapped risks to entities. If I don't use "initiate later" option, risk assessment scopes are created immediately. And we can start risk assessment.

I may have the wrong configuration for scheduled jobs.

I will review the scheduler and scheduled job. And try to initiate risk assessments again.

Thanks,

Oshikata