Mitigation Notification

[former_member182655]

Dear colleagues!

I have tried to find any information regarding my question... and have not found any solutions or discussions 😕

I have the following issue:

Is it possible to notify Mitigation (or Risk) Owner about using his/her Mitigation?

I.e. Approver1 in CUP mitigated risk with mitigation control id MI_HIGH. We need that Mitigation Owner gets notifaction "Mitigation control MI_HIGH has been used in request 999999 by Approver1", or another notification which will be understandable for Mit.Owners.

Thank you for paid attention

Regards,

Artem Ivashkin

[simon_persin4 · Accepted solution]

Hi

It is certainly possible to trigger a workflow when the mitigation control is altered or assigned.

Check the RAR configuration node " workflow" and enable the appropriate parameter.

You will then need to define the workflow in CUP in order to direct it to the appropriate person. You should be able to use the standard Approval Determinators to identify the correct "approver".

This should fit what you ask for but if not, please let us know.

Simon

[koehntopp · Accepted solution]

Simon,

you don't want to do that, as it will conflict with the CUP assignment process. The RAR workflow option is meant to approve the assignment in RAR, whereas in CUP it would already have been assigned.

These two options should be used either/or.

What you may have meant is in RAR - Configuration - Additional Options "Send e-mail notificatioon to the monitor of the updated mitigated object" which will inform monitors that a new user or role has been assigned a mitigating control.

Kind regards,

Frank.