All ideas

Risk Assessment - Quantitative factors - Option to add multiple levels in a hierarchical factor Customer wants to create a Hierarchical factor with 2 sub-levels where second level to identify the maximum value of a set of factors and 1st level is ...

As per the current Solution, the User can relate the Evidence while performing a control test or self-assessment. AON has requested that Evidence be auto-created in the GRC Library when Evidence is attached ("Attach Evidence" attribute) during a C...

initiator self assessment /test plan should have option of adding methodology at task level. Each task can have unique methodology Product Team: Can you provide more information? What are the methodologies and what should be the behavior for each ...

Risk Assessment Algorithm : There is no option to add a conditional statement in Risk Assessment Algorithm Customer has multiple sub factors to calculate impact and Likelihood, and the formula for Impact and Likelihood has conditional statements t...

Want to be able to define and track KRIs for Threats and Vulnerabilities

Adding all vulnerability detail pulled from tenable or other connectors to Vulnerability scan results report Otherwise, provide different reports for different connectors

PIF use Tenable as Connector and we should pull Asset Library data from the connector only and to create GRC library - Asset for it like UCF instead of asking users to create asset in GRC library as well

While fetching the GRCF data from CMDB using integration, a Rule engine can be implement that will help us in configuring the Organization specific rules around assets(CIA values or other attributes). For ex: Bank ABC have a requirement that all d...

For an Asset - Vulnerability pair in scan n for which the Vulnerability is not detected in scan n+1 any ticket that was triggered for this Asset - Vulnerability pair should be closed automatically. There should be a configuration to enable or disa...

Add 'Area of Compliance' - Findings/Issues tab in IT Compliance and needs to be carried over to downstream form and reports