As we are starting our journey to convert classic attestations to new attestations using the Smart Assessment engine we found ourselves at a decision point on how we migrate the templates between the environments.
Background: we cannot build the templates directly in production for the following reasons:
- Only admins have the scope switcher and the control category templates need to be built in the GRC: Policy and Compliance Scope, similar to the OOTB "GRC attestation"
- There is currently no preview capability to work out all the bugs and once you publish the template there is no going back to editing this template once you kick off some attestations. OOTB ACL is set to "nobody" for deleting any attestations records.
We came up with two approaches and both have pros and cons.
- Publish customization to our app repo
- Pro: easy to grab the entire set of application files
- Con: will also grab all in progress changes and move to upper environments prematurely
- Update Sets
- Pro: moves only the files related to the template
- Con: need to identify all the classes that need to be captured
What is everyone else doing?
