Mitigating Control Management Approver

[Former Member]

Hello,

What is the significance of the Management Approver when creating a Mitigating Control? I do not see any approval process in GRC . Does this relate to setting up workflow?

thanks

Tammi

[Former Member · Accepted solution]

Hi Tammi,

When you set up a background job for sending alert notification via email based on the alert type. By selecting Conflicting Actions and/or Critical Actions alert types, notifications are sent to Risk Owners. Selecting Control Monitoring alert type sends notification to the Management Approver of the Mitigating Control.

Regards,

Sudip.

[Former Member · Accepted solution]

Thanks for the clarification. This is difficult to find in any documentation.

Tammi

[Former Member]

Hi Tammi,

Do you have any process documentation on mitigating controls? I don't need to know how to create them in GRC - I've got that covered. However from a non technical audit perspective, there's a process around creating a control, prior to having to set it up in the system. Do you have anything in that area?

If you do and you don't mind sharing, I would most appreciate it.

Thanks,

Santosh