Add existing attributes to a GRC workflow state

Add existing Governance, Risk, and Compliance state model attributes to add special capabilities to workflow steps without custom code. Attributes control features like approval requirements, report generation, and Open Security Controls Assessment Language (OSCAL) file exports for specific workflow states.

Before you begin

With CAM, you get the following UI button attributes:

• Generate ATO Letter: Generates Authority to Operate (ATO) letter document.
• Generate Executive Summary: Generate an Executive Summary document.
• Generate OSCAL SSP: Generate an OSCAL format System Security Plan (SSP).
• Generate POAM: Generate a Plan of Action and Milestones (POA&M) document.
• Generate OSCAL AP: Generate an Assessment Plan in OSCAL format.
• Generate OSCAL AR: Generate an Assessment Results in OSCAL format
• Generate SAP: Generate a Security Assessment Plan (SAP) document.
• Generate SAR: Generate a Security Assessment Report (SAR) document.
• Generate SSP: Generate a System Security Plan (SSP) document.
• Required approval: Requires approval before proceeding to the next step.

You also get the following related list button attributes:

• Required Information Type Actions: Enables Add and Remove buttons in Information Types related list
• Required Baseline Actions: Enables buttons in Baseline Controls related lists (Add, Remove, Mark as Not Applicable, Inherit, Create Hybrid, Return to Baseline)
• Required Overlay Actions: Enables Add and Remove buttons in Overlays page

In addition, you get the following UI page attributes:

• Required Overlay Page: Displays the Overlays UI page
• Required Authorization Documents Page: Displays the Authorization Documents page

Note:

To configure state model attributes with the CAM specific attributes, perform the tasks in this topic. To create a new state model attribute, see Create a new state model attribute.

Role required: sn_irm_cont_auth.admin

Procedure

1. Navigate to All > Continuous Authorization and Monitoring > Administration > GRC State Models.
2. Open the state model record that contains workflow states.
3. On the GRC workflow states related list, select the workflow state for which you want to add the existing attribute.
4. On the selected workflow state record, select State Model Attributes tab.
5. To add the existing attributes, select Edit.
6. Select attribute from the Collection list.
7. Select the right arrow icon (>) to move selected attribute to the State Model Attributes List on the right.
8. To remove an attribute, select attribute in the State Model Attributes List on the right panel and select the left arrow icon (<).
9. Select Save to save the attribute.

Result

State model attributes are configured and control the functionality available at specific workflow steps. You can see the appropriate buttons and features based on the attributes assigned to each workflow state.