What determines the STATUS of a control in GRC?

juliesutton
Mega Expert

I have a policy with an associated control objective, control, indicator template and indicator.  The indicator shows passing as the last result.  What changes the status of the control itself?  It shows non-compliant?  Is that tied to the attestation?

Thanks,

Julie Sutton

1 ACCEPTED SOLUTION

SanjivMeher
Kilo Patron
Kilo Patron

The Control Status is dependent on both Indicator task result as well as attestation result.

So if the attestation was failed, control becomes non-compliant

Or if the indicator task failed, control becomes non-compliant.

In any case an issue is created. So you should check, if there is an issue still open. 

Even if the last indicator task was passed, there could be an old indicator task, which was failed and its corresponding issue is still open, which is keeping the control non-compliant.


Please mark this response as correct or helpful if it assisted you with your question.

View solution in original post

12 REPLIES 12

If your implementation is OOB, then i will suggest you to create HI incident for support to troubleshoot further.

 

Regards,

Sachin

Hi Julie,

Can you check the Activity Journal and see if it shows any activity log for Status field? If not, you can add it by clicking the Configure available fields link (see below).find_real_file.png

Once you can see the activity log for the said field, see if there were other changes that occurred at the same time the control became non-compliant. Check the date and the user who caused the change as well and maybe you can trace that back to something. You can post the screenshot here as well so we can check.

Regards,

Dexter

SanjivMeher
Kilo Patron
Kilo Patron

The Control Status is dependent on both Indicator task result as well as attestation result.

So if the attestation was failed, control becomes non-compliant

Or if the indicator task failed, control becomes non-compliant.

In any case an issue is created. So you should check, if there is an issue still open. 

Even if the last indicator task was passed, there could be an old indicator task, which was failed and its corresponding issue is still open, which is keeping the control non-compliant.


Please mark this response as correct or helpful if it assisted you with your question.