The periodic review workflow prompts decision makers to revisit control review decisions before expiration or when a supplier or internal recipient updates any of the underlying assessments.
Configuration settings determine:
- How far in advance of expiration to create a control review expiration action for the control review.
- Policies for sending related notifications.
To configure workflow for periodic reviews of risk controls, complete the following steps:
- Enable the parameter Enable control review workflow.
- If not already enabled, enable the parameter Enable action queue.
- Configure settings on the Control review tab of the Configure periodic reviews page.