Re-Evaluate Approvers if Risk Score Changes
Written by Michelle Henley
Updated at February 2nd, 2024
The system allows for tenants to configure more or less approvers to be triggered based on the Risk Score of an engagement. In scenarios where the Risk Score changes after the engagement is submitted and scored, the system will automatically re-evaluate the need to add or remove approvers based on the new score.
If the risk score is changed based on the responses in the DDQ, the following rules apply:
| Scenario | Outcome |
|---|---|
| Risk score changes and an additional approver is needed based on the new score → | The additional approver(s) will be added to the approver flow automatically without needing resubmission of the request. |
| Risk score changes and an additional approver is no longer needed based on the new score → | The additional approver(s) will be removed from the approver flow automatically without needing resubmission of the request. |
| Risk Score changes and the request is already fully approved → | The system will not re-evaluate the need for additional approvers, unless the request is updated and resubmitted. |
| If an approver has already rejected the engagement → | The system will not re-evaluate the need for additional approvers. |
The risk score is manually adjusted, the following rules apply:
| Scenario | Outcome |
|---|---|
| Risk score is manually adjusted and an additonal approver is needed based on the new score → | The additonal approver(s) will be added to the approver flow automatically without needing resubmission of the request. |
| Risk score is manually adjusted and an additonal approver is no longer needed based on the new score → | The additonal approver(s) will be removed from the approver flow automatically without needing resubmission of the request. |
| Risk Score is manually adjusted and the request is already fully approved → | The system will not re-evaluate the need for additional approvers, unless the request is updated and resubmitted. |
| If an approver has already rejected the engagement → | The system will not re-evaluate the need for additional approvers. |
Things to Note
- An email notification will be sent to any approvers who are automatically added to an approver flow, if it's their turn to approve. Otherwise an email will be sent once it's the approvers step to approve.
- If current approver(s) are removed from the engagement, they will still have view-only access to the request, but will be unable to approve it.
- If an approver has already taken action on an engagement, but is later removed, the action will still be logged in the Request History.