Issue form

Member of the group assigned to resolve the issue. Starting with Version 12.0.1, the user must have at least the sn_grc.business_user role.

Note: Use the bulb icon to get suggestions on who must the issue be assigned to. The bulb icon only appears if you have the GRC: Predictive Intelligence application activated, the form is saved, the Assigned to field is not inactive, and the GRC Property is selected as Similarity Analysis. For more information, see Governance, Risk, and Compliance properties.

You can configure a hierarchy of users to access the issue record. For more information, see User hierarchy access control for issue and remediation task records.

Starting with Version 12.0.1, the assigned-to user gets an email notification when the issue manager requests more information.

Starting with Version 12.0.1, when an issue transitions to the Respond state, an entry in the Assigned to field is mandatory.

The group responsible for managing and reviewing the issue. Starting with Version 12.0.1, the following enhancements and requirements were introduced:

• Members of the issue manager group must have one of the following roles:
• sn_audit.manager
• sn_audit.user
• sn_compliance.manager
• sn_compliance.user
• sn_grc.manager
• sn_grc.user
• sn_risk.manager
• sn_risk.user
• When an issue transitions to the Analyze state, an entry in either the Issue manager group or Issue manager field is mandatory.
• When an issue is assigned to the group, the members receive an email notification. Additionally, the issue manager receives an email notification when the issue transitions to the Review state.

The user responsible for managing and reviewing the issue. Starting with Version 12.0.1, the following enhancements and requirements were introduced:

• The issue manager must have at least the sn_grc.user role.
• The issue manager receives an email notification when the assigned-to user provides requested information.
• When an issue transitions to the Analyze state, an entry in either this field or Issue manager is mandatory.
• When an issue transitions to the Respond state, an entry in this field is mandatory.

Starting with Version 12.0.1, the issue manager can assign the issue rating to the issue. Based on the issue rating, the Due date under the Dates tab is calculated as follows and displayed:- Very high (2 days) - High (4 days) - Moderate (8 days) - Low (10 days) - Very Low (15 days)

You can manually override the Due date. Note: Users with the sn_grc.manager and sn_grc_advanced.issue_triage_manager role can navigate to Policy and Compliance > Administration > Issue rating and define additional issue ratings.p

When the issue transitions to the Respond state, the Issue rating field is read only.

Control or risk associated with the issue.When the control is associated, the corresponding entity of the control is added to the Entity field, and the control objective is added to the Control Objective/Risk Statement field. These control objective and entity are the ones that are linked to this control.

When the control is associated to the issue form, an m2m record is created in the source [sn_grc_m2m_issue_item] table. Whenever a record is added in the source table, a corresponding record, Issue to Entity is added in the destination [sn_grc_m2m_issue_to_entity] table, and another record Issue to Content is added in the destination [sn_grc_m2m_issue_content] table for the associated entity and control objective of the control.

(Starting with Version 12.0.1) The date when the issue is confirmed. This field is read-only, and displays today's date when the issue is moved from New to any of the following states:- Analyze - Review - Respond

Note: If a triage issue is converted to an actual issue, this field displays the date it was converted.