Hi @Valqe ,
Intresting Question!!
It's not advised to import directly to "sn_risk_risk" table as it's meant to be created automatically when you add the entity type to Risk Statements.
Now, as per your customer's requirement, i belive it's the risk's excel sheet which they want to track and remidiate. so import 'Existing risk ticket queue', to the "sn_grc_isse" table and follow the issue management lifecycle.
Issue lifecycle involves the below stages and it should be the right approach to track your requirement provided by your customer:
New: Default state of issue. So as soon as issue is created, it will be in New state and assigned to the control owner.
Analyze: In this state, the owner needs to analyze the issue and identify the root cause.
Respond: In this state, owner decides if he/she can remediate the issue or needs to accept the issue and create an exception. If owner select response as Remediate, the owner/his team responds/fixes the issue in this state and move it to review. If they select response as Accept, we provide user to create an exception. And until the exception is closed, we keep the issue in respond state. Once closed, owner should remediate the issue.
Review: In this state, as per my understanding, the compliance/Risk/Audit Manager reviews the response from the owner and decides if issue is fixed.
Closed: Compliance/Audit/Risk manager closes the issue, if he/she thinks issue has been resolved.
