Allow effectiveness ratings for individual controls in risk module
It would be useful to allow each individual control or treatment to be rated for effectiveness allowing a better overview for the Risk Manager's residual risk assessment
Agreed. One of the key reasons I find that risk people push back on Promapp is that it doesn't allow this level of evaluation.
I would also add that it needs to have the option to evaluation both
~ design effectiveness (is it designed to work the way we need, ie delegation levels) AND
~ operational effectiveness (is it working to the way that it should, ie are people following it)
AdminKerry Hiki (Admin, Nintex) commented
Great idea. This isn't on our roadmap right now but we'll monitor interest from other clients. Thanks!