In the Auditable unit, there is a " Assess Risk" button. when we click on "Assess Risk", there is pop-up window. In that, there will be a Risk Assessment Methodology(RAM), Risk Assessor and Approver field. My Question is: the approver should not be the same as the risk assessor when performing risk assessment on auditable units.
