After all risks in a role is remediated or mitigated can we setup an alerting mechanism to send notification when a new risk is introduced to the role as per the rule set?
It is a good approach to include the risk analysis step in your BRM role maintenance workflow.
But you can also use Risk Terminator to achieve this straight when doing role maintenance in backend systems. It has some limitations like not extending the risk analysis to composite roles in which your changed single role is contained but is really helpful indeed.
You can get more information about it on the following link:
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.