Service now Irm

[Shashankmp1]

Hi ,

Can anyone please clarify me what happens if entity becomes inactive what happens to their respective risk and control associated with that entity.?

[Tejas Adhalrao]

hi @Shashankmp1 ,

Making an Entity inactive does not automatically deactivate or delete the associated Risks and Controls.

In most IRM implementations:

• The Risks and Controls remain in the system and retain their relationship to the Entity.
• Historical assessments, issues, and audit data are preserved for reporting and compliance purposes.
• The inactive Entity typically won't be available for new operational activities or selections, depending on your configuration.

The exact behavior can vary if your instance has custom Business Rules, Flows, or lifecycle policies that update related records when an Entity is deactivated.

Are you referring to the out-of-the-box IRM/GRC behavior, or does your instance have custom logic that manages Entity, Risk, and Control relationships?

If this solution helped, please mark it as the accepted solution. Thank you!

[shashankraj]

I am referring the out of box behaviour what will happen?is it the same .?

[Its_Azar]

Hi there @Shashankmp1 

making an entity inactive does not automatically inactivate or delete its associated risks and controls. They typically remain in the system with their existing relationships intact. However, the exact behavior depends on your organization's IRM configuration, business rules, and any customizations. It's a good idea to review the entity deactivation logic in your instance to confirm whether any custom automation updates related records.