We have the three lines of defense model and are looking for a suggested approach to capture an issue being "self-identified" without using the Issue Triage function and instead by starting with an Issue record directly?
Issue will be created by risk managers and the triage function would be an extra step based on our current maturity and org structure. Most options I have seen involve adding a flag to the issue table to capture "if self-identified".
