Skip to Content

Ad-hoc Issue Object Type in GRC Process Control

Mar 12 at 10:24 AM


avatar image

Hello All,

I am here trying to understand about adhoc issue management.My customer uses Ad-hoc issue for reporting issues over control, Organization, Policy, Regulation & regulation Requirement. But as of now, they are reporting issues on Regulation only. Looking at the reported issue, it doesn't look like a regulation failure, rather an operation failure. Eg: Email sent to wrong customer which has some sensitive data. We believe that this could be reported at control level/ Sub-process level.

Can you let us know how this is reported at entity level. On what basis the issues are classified in a organisation. I see technical stuff in available online, but nothing with respect to how this is managed.



10 |10000 characters needed characters left characters exceeded
* Please Login or Register to Answer, Follow or Comment.

0 Answers