Skip to main content

Creating an issue

Roles and permissions

The following roles can create an issue:

  • Administrators

  • Compliance managers

  • Users

Issues can be linked to the following objects and modules: programs, controls, labels, audit requests, assessments, evaluations, risks, and vendors. Issues can also be created from the Work items tab, but the issue must be linked to a source, e.g. a label.

Tip

For more information, see the Creating issues video at the bottom of the page.

To create an issue:

  1. From the left menu, select the tab that corresponds with the issue you want to link. For example, if you want to link an issue to a control, select the Controls tab.

  2. Select the specific object. For example, if you want to link the issue to control ID 1234, select that control.

  3. Select the Issues tab.

    issues-tab.png

  4. Click New.

  5. Enter the following information:

    1. Summary (required) - A summary of the issue and the potential result if it isn't remediated

    2. Description - A detailed overview of the issue

    3. Make issue private checkbox - Select this checkbox to make the issue private. Doing so restricts inheritance—only users explicitly added to the issue’s facepile can see the issue. Other users (such as members of affected objects) can see that the issue exists, but they’ll only see the issue ID. To access the issue, they’ll need to contact the issue manager(s).

    4. Action plan - The plan to remediate the issue

    5. Impact - The impact the issue has on your organization if it isn't resolved

    6. Priority - The priority level for resolving the issue

    7. Assignee - The individual who will work to remediate the issue

    8. Effort level - The amount of effort it'll take your organization to remediate the issue

    9. Business owner - The individual who owns the issue. Note that a contact can also be an owner.

    10. Executive sponsor - The individual who is of senior level and ultimately responsible for overseeing the remediation of the issue

    11. Due date - The date that the remediation is due

    12. Discovered on - The date that the issue was discovered

    Tip

    Business owners and executive sponsors can have an Unassigned status.

    For example, if a business owner had been previously assigned to the issue, but the need for an owner is no longer required, the status can be set to Unassigned.

  6. Click Create.

    The issue is created.

Creating issues

Watch this short video to learn more about creating issues.

In this section: