Servicenow GRC controls workflow

[Gary22]

where can i find the workflow which governs the status of a control during its life cycle . 

I mean i am after the workflow which decides that on taking a particular action , the control status will move to this . 

please guide , where to find the oob wokflow for control ( draft -> attest -> review -> monitor -> retired ) .

Also if there is no OOB workflow , how does a control move from one status to another . what is orchestrating all this OOB ?

@Jan Spurlin @Phil Swann  @Pranav Bhagat  @Rafael Cardoso 

Thanks a lot in advance 

[Gary22]

Also if there is no OOB workflow , how does a control move from one status to another . what is orchestrating all this OOB ?

[Sulabh Garg · Accepted solution]

Hello Gary,

There is no workflow/flow on Control table (sn_compliance_control) as the controls states are changed from the UI actions mentioned on the control form.

1) Attest UI action - Move state from Daft to Attest

2) Submit for Review UI Action - To move the state from "Attest" to "review"

3) Monitor and Retired UI Action - To move the state to Monitor or retired from "Review",

Hope it helps!!

Please Mark ✅ Correct/helpful, if applicable, Thanks!! 

Regards

Sulabh Garg

[Sebastien Fix1]

@Sulabh Garg note that OOTB a Control will move back to Draft if any change to the Control Objective is performed. I often deactivate the last line "control.state  = "draft" to avoid that from happening since I find it a bit to strict.

[Prashanth Velam]

@Sulabh Garg This is very helpful to know that the Control has got no workflow. The OOB suggestion is to move from Draft > Attest > Review > Monitor > Retired. Will there be any challenges if we move the workflow around to Draft > Attest > Monitor > Review > Retired?

Will there be any downstream implications if we change this flow? Thanks in advance!