I have created a group factor to assess individual controls on a risk assessment. The group factor contains a manual factor (manual selection of control effectiveness) and an automated scripted factor (to check if the associated control is non-compli...

In the risk workspace, any idea why the residual risk score would not be displayed on the risk record overview tab? We have a risk assessment completed along with a calculated residual risk score, however it is not populating on the risk record overv...

Where in the configuration does the residual risk calculation take into account any non-compliant controls? My assumption is that the residual risk score should automatically be lowered if there is an associated non-compliant control.

We have instances where vendors are refusing (due to their policies) to login and access the portal to complete the vendor engagement assessment. In these instances, we send the assessment questionnaire to them in an excel document and have them comp...

We identified a flaw in the risk assessment workflow when a risk acceptance task is rejected. If a risk acceptance task is rejected, the task is automatically closed and if the acceptance task is the only risk response for a risk, the risk is automat...