Just want to check if modifying a mitigation control is possible once it is assigned to any risk?
I have noticed that only below mentioned details can be modified:
1. Valid From
2. Valid To
4. Monitor (drop down)
However, I cant add/remove already assigned systems! The only way I found is to delete it and again mitigate the risk id with appropriate details required.
My question is: Is it not possible to change systems for an existing mitigation control?