Why Record an Acceptance
Sometimes you decide to tolerate a risk at its current residual exposure. A formal acceptance records who signed off, when, and why, which is exactly what auditors want to see for any risk that sits above your appetite.
Record an Acceptance
- Open the risk and find the Acceptance section.
- Click Record acceptance.
- Enter a rationale explaining why the risk is accepted.
- Optionally set an expiry, the date by which the acceptance should be reviewed again.
- Save. The risk shows an active acceptance with the accepting user and the date.
Acceptance Required
A risk that is over appetite and has no active acceptance is flagged as acceptance required, so gaps in sign off are easy to find in the list filter and on the dashboard.
Expiry and Reminders
When an acceptance has an expiry, ISO Mate reminds the owner before it lapses and again once it has expired. An expired acceptance returns the risk to needing attention.
Revoking an Acceptance
If circumstances change you can revoke the active acceptance at any time. The full history of acceptances and revocations is retained for the audit trail.