Risk and Control relationship getting auto-delete

[Vichitra Gupta]

Hi All,

I am facing issue in linking Controls with the risk.  Every time I attach Risk with the control, the relationship gets auto-delete the next day. 

These are the steps I follow-

1. Add the entity in the control objective

2. Add the Control objective in the Risk statement of the risk

3. Then, add the controls to the risk

Please suggest where I am missing?

[Shannon Long]

Hi Vichitra, 

I would recommend the following steps for risk and control relationships: 

1. Map the mitigating control objectives to the risk statement form 

2. On the entity form (or entity type form) add both the risk statement and control objective

3. the system will automatically generate a unique risk and control for that entity (or group of entities at the entity type level) and the relationship will exist upon generation. 

A few things to remember is to make sure your entity is not retired, and your risks and controls are in an editable state. 

Lastly, there is a scheduled job within System Definitions named "Delete invalid risk control relationships" that is causing the auto- delete the next day. You could turn this job off as well. This job is looking for any risks or controls that are not active and removing the risk or control relationship. 

Please let us know if these solutions do not fix your problem.