You are helping your client identify and define their controls. Youhave determined that your client requires two perspectives: Business Units and Regulatory Standards.
The controls are going to be secured by the business unit, and you want to ensure that when the client defines new controls, it is mandatory to assign a Business Units perspective to the control. You are going to set the
"Required" field to "yes" for the Control-Business Units association.
Where do you do this in the product?

You have created a risk definition R100 and have created a new control C100 for this risk. No user has been assigned the Risk or Control reviewer and approver roles. What will be the state of R100 and C100 after submitting?

Which statement related to Advanced Access Controls is true?

You have defined an initial Perspective Hierarchy for your client in theAdvanced Controls module. After refining their business requirements, your client wants to expand the existing hierarchy to include 150 perspective items in various levels. For efficient processing, you decide to use the GRC data migration feature to import the new items.
Which three are valid processing steps required to define the export file? (Choose three.)

At the last step of initiating assessments, the assessment manager sees who the assessment participants are (to complete, review, and approve the assessments). If the assessment manager wants to change the participant, who completes the assessment, what should he or she do?