Entity Status

Status Colours

All entities in NorthGRC have a status. Entity statuses are shown in list pages, and normally with an option to see a popup with information on all relations that will have impact on the status.

Entity Status is primary a way to show which Entities needs attention.

Planning Tasks

Task status is only dependent on the task state and task dates.

State	Colour	Status
State is set to Planned Default for new tasks		Planned
State is set to In Progress		In Progress
State is Planned or In Progress, and … Current date is after the task instance due date		Overdue
State is set to Done		Done

Documents

Document status is primary dependent on the Document Version Approval Status. A document will get the Action Required status if a linked task is overdue.

State	Colour	Status
Document has Draft only, or the newest version the user can see is not approved. Default for new documents		Draft
Newest version the user can see is Approved		OK
Newest version the user can see has Approval in Progress		In Progress
Newest version the user can see is in state not Approved Or: One or more Tasks are overdue		Action Required

Document Folders

Document folders are depended on the sub folder and documents only.

State	Colour	Status
All folders and documents in the folder are status OK (newest version is approved)		OK
One or more folders and documents is Draft (or last version is not approved) All others are OK		Draft
One or more documents are In Progress All others are OK or Draft		In Progress
One or more documents are in status Action Required		Action Required

Controls

Control status is basically dependent on the implementation state. If a control is linked to documents and tasks, the status will be impacted if these are in states “In Progress” or “Action Required”

State	Colour	Status
Implementation is Not Relevant		Disabled
Implementation is Needs Review		Draft
Implementation is Implemented		OK
Implementation is Partly Implemented Or: One or more Documents are In Progress Or: One or more Tasks are In Progress		In Progress
Implementation is Not Implemented Or: One or more Documents are Action Required Or: One or more Tasks are overdue		Action Required

Requirements

Requirements are dependent on the linked controls only.

State	Colour	Status
All controls are status Implemented or Not relevant		OK
One or more controls are in Needs review All others are Implemented or not relevant		Draft
One or more controls are in Partly Implemented All others are Needs Review, Implemented or Not relevant		In Progress
One or more controls are Action Required		Action Required

Assets

The Asset status is dependent on the state of the last risk assessment (analysis and evaluation) or risk treatment. If an Asset is linked to tasks, task overdue status will set the Asset status to “Action Required”.

State	Colour	Status
Default status or, Last analysis is in progress		Draft
Last analysis is Closed or, last analysis is Treated (treatment done)		OK
Last analysis is in Evaluation or, analysis treatment is in progress		In progress
Linked task is overdue or, analysis treatment task is overdue		Action Required

Vendor Assessment

Vendor Assessments status is dependent on the assessment state, the result of the assessment and if the assessment was not performed before the due date.

State	Colour	Status
Assessment Planned or running		OK
All Assessments are done		Done
Manually set Failed Assessment to Accepted		Accepted
One or more contact Assessments Failed Or: Assessment overdue		Action Required

Vendors

Vendor status is dependent on linked Vendor Assessments, Vendor Agreements and tasks.

State	Colour	Status
Vendor default All Vendor Assessments are Done, OK or Accepted		OK
All Vendor Assessments are Done, OK or Accepted And: Agreement expires in next two weeks		Upcoming event
One or more Vendor Assessment Failed Or: One or more tasks are Overdue Or: Agreement has expired		Action Required

Organisation

Organisation units have a single status in the current version.

State	Colour	Status
All		OK

Business Goals

In the current implementation, status is not calculated or shown for Business goals.

Incidents

In the current implementation, status is not calculated or shown for Incidents.