Policy and Compliance Policy Exception flowchart

tphillips · ‎03-31-2023

Is there are flowchart for the steps of moving a Policy Exception thru creation to approval and closure?

Thank you,

Tom

Community Alums · ‎03-31-2023

Type sn_compliance_policy_exception.CONFIG in the navigator and you will see everything, including two flows.

As per the previous version, the initial 'Request Approval' is for the Requester to submit it into the process formally. Then the 'Approver' is actually the assigned_to , who is responsible for taking it through the process.

Risk Management has been de-coupled, but still exists without dependency on GRC: Risk Management.

We still see Risks associated with the Impacted Controls, and the remaining Mitigating Controls which support those risks.

There are two new areas: Verification Rule and Approval Rule

Refer to the video :https://www.youtube.com/watch?v=JcmuQypffI8

View solution in original post

c_zirkelbach · ‎11-01-2023

What happens when you create a policy exception from an issue and then 8 months later the owner/approver decides that it should not be a policy exception and it should be a remediation task.

They solve the issue using a remediation task but the start date and end date dont reflect the actual amount of time it took to resolve.

How do you reflect the actual 8 month time frame that it took to work through the issue and find a solution using the remediation task.