hi @Shashankmp1 ,
Making an Entity inactive does not automatically deactivate or delete the associated Risks and Controls.
In most IRM implementations:
- The Risks and Controls remain in the system and retain their relationship to the Entity.
- Historical assessments, issues, and audit data are preserved for reporting and compliance purposes.
- The inactive Entity typically won't be available for new operational activities or selections, depending on your configuration.
The exact behavior can vary if your instance has custom Business Rules, Flows, or lifecycle policies that update related records when an Entity is deactivated.
Are you referring to the out-of-the-box IRM/GRC behavior, or does your instance have custom logic that manages Entity, Risk, and Control relationships?
If this solution helped, please mark it as the accepted solution. Thank you!
