Introducing Risk Approval Workflow

The Risk Management Module currently lacks a designated Approver responsible for validating the accuracy of the risk treatment strategy and the assessments conducted by the selected assignee. The latest version of Scrut introduces the Approver user persona, which you can enable within risk settings according to your organization's needs.

How does it work?

1. Navigate to "Risk Management", go to "Settings", then go to the "Configurations Tab".

2. You can enable the Risk Approval Flow by toggling the switch ON here.

3. Inside the "Risk detail" page, there will be a new drop-down menu to select an Approver. Note that an Assignee cannot be an Approver, and vice versa.

4. The initial assessment flow in risk remains the same. The user does the initial assessment of the risk, links controls, and chooses a treatment strategy. Additionally, a note section has been introduced right after the treatment strategy section to allow the user to add justification for why the chosen strategy was selected. The treatment strategy and note will be displayed on the Risk details page as well.

5. The user can now go ahead and assess the residual risk. Once the residual assessment is also completed, the user will be shown a "Notify Approver" button, but only if they are not the approver themselves.

6. Upon clicking the "Notify Approver" button, the Approver will receive an email asking for their action.

7. Upon clicking "View Risk", the Approver will be taken to the risk detail page where they can either accept or decline the risk.

8. If the Approver decides to decline, they will be required to add a reason for their decision.

9. If the Approver wants to approve the risk, they can click the "Approve" button. Once the risk is approved, it will be in a closed state, and no user will be able to edit any field for that particular risk except to add comments.

10. Audit Logs are also captured.

11. Risk Approver is also added to the Risk Register Table.

If you have any questions or issues, please reach out to your assigned Customer Success Manager. They'll be happy to assist you!

To view all the product updates, please click here.