How is Control Issue automatically created ?

[User179407]

Hello,

OOB, there is an Attestation 'GRC Attestation' which has as question 'Is the control implemented?', if the user answers NO to this question, the control state is changed to non-complaint and an issue is automatically created.

Q1: how is the control state changed and how is the issue record created  OOB?

Q2: I have created another Attestation and attached it to the control, I want to set the state of Control to non-complaint based on answers in this new attestation, how do I configure it ?

Thanks,

Suraj Chauhan

[Ashutosh Munot1 · Accepted solution]

Hi,

This is handle by Business rule:

Update item when assessment complete on asmt_assessment_instance table.

This called the Script include:

GRCAssessmentUtils ->GRCAssessmentUtilsBase then in there we have a function called as _evaluateControl where this logic is handled.

This Script include is OOB and can't be changed, so you can override the function in this GRCAssessmentUtils.

So what you can do is create attestation and see the value to -1 for the question which will lead to create issue for the control.

I hope this helps you.

Please mark answer as correct and helpful.

Thanks,
Ashutosh

[Gary22]

Hi @Ashutosh Munot1 

Your reply above is really helpful . I have a further query , if you can guide me please . 

OOB, there is an Attestation 'GRC Attestation' which has as question 'Is the control implemented?', if the user answers NO to this question, the control state is changed to non-complaint and the control moves to review .

I want to move the control back to draft in this scenario . So if the attestation respondant says no the control is not implemented , i want to move the control back to draft . Should i alter the util ? or shud i use a business rule . Can you please guide . 

Thanks a lot in advance . 

[Ashutosh Munot1]

Hi,

One more info that GRCAssessmentUtilsBase calls IssueUtils -> IssueUtilsBase and then in that you have function called: updateOrCreateAttestationIssue ->_updateOrCreateAttestationIssue where the issue is created.

Thanks,
Ashutosh

[User179407]

Followup question: do you know how is the Duration field set as default to 1 day in automatically  created Issue ?