Use entity and risk dependencies using the GRC: Workbench

The GRC: Workbench utilizes CMDB information to show the upstream and downstream relationships across all applications. CMDB information is one of the sources. These relationships enable consistent risk mapping and modeling across the enterprise.

The GRC Manager [sn_grc.manager] uses the GRC Workbench to:

• Create entity classes.
• Define the upstream/downstream relationships between entity classes. These relationships make up the dependency model and ensure that risks are defined and evaluated consistently across the enterprise.
• Create entity types, create entities, and classify entities

Note:

The GRC Manager cannot view the GRC: Workbench from Risk > GRC Workbench. The GRC Manager [sn_grc.manager] enters /$grc_workbench.do after their instance name in the url to access the GRC: Workbench.

The Risk Manager [sn_risk.manager] uses the GRC: Workbench to:

• Perform all the same tasks as the GRC Manager
• Create risk frameworks, risk statements, and risks
• Define risk relationships

Model Setup tab

The Model Setup tab contains links to perform the following tasks.

Link	Action
Dependency Model	Create entity classes and develop the organizational relationship model
Entity Types	Create and edit entity types
Dependency Map	Create and visualize entity relationships

Risk Dependencies tab

The Risk Dependencies tab contains links to perform the following tasks.

Link	Action
Risk Frameworks	Create and edit risk frameworks
Risk Statements	Create and edit risk statements
Relationships	Create and visualize risk relationships

• Activate GRC: Workbench
  The GRC: Workbench plugin is not activated by default, it is available as a separate subscription within the GRC Suite.
• Create entity class using the GRC: Workbench
  GRC managers create entity classes representing the types of things that are part of the dependency model. Reports can be filtered to define relationships between the different enity classes. An entity class defines what a entity actually is.
• Create relationships between entity classes using the GRC: Workbench
  Managers create relationships between entity classes using the GRC: Workbench to build out the dependency map and better understand how entities relate to one another.
• Associate a risk framework or risk statement with an entity type to generate risks
  Risks are automatically generated when you make associations between risk frameworks or risk statements and entity types.
• Visualize and edit entity dependencies using the GRC: Workbench
  The GRC: Workbench gives GRC administrators a graphical interface to create entity dependencies. These relationships enable consistent entity and risk mapping and modeling across the enterprise.
• Delete entity dependencies using the GRC: Workbench
  When deleting entity dependencies, only the relationship between the entities is deleted. The entities themselves remain unmodified.
• Delete an entity class using the GRC: Workbench
  Deleting an entioty class, deletes all relationships below it.
• Create a risk using the GRC: Workbench
  Risk managers can create risks directly from the GRC: Workbench.
• Visualize and edit risk dependencies using the GRC: Workbench
  The GRC: Workbench gives GRC administrators a graphical interface to create risk dependencies. These relationships enable consistent entity and risk mapping and modeling across the enterprise.
• Delete risk dependencies using the GRC: Workbench
  When deleting risk dependencies, only the relationship between the risks is deleted. The risks themselves remain unmodified.