Dear GRC Experts,
Need some details about Mitigation Controls.
When creating Mitigation Controls, we will mention below details.
Risk ID
Mitigation Monitor and Mitigation Approver details
Frequency
Reports
As per my knowledge under REPORTS tab we will maintain a report name which need to be executed by Mitigation monitor within the frequency set in the mitigation control.
If monitor doesn't run this report in specified frequency, we can schedule Alert generation job which sends alerts to the monitor about it.
My Queries:
1. On what basis these reports are derived? Are these reports, standard or customized reports? Can someone give me an easy example to understand the purpose of the Report maintained in REPORTS tab.
2. When monitor executes theses reports what information is shown to them? On basis of that what is the understanding for the monitor?
Please help me to understand these details.
Thanks in advance
~ Madan