Controls - Control permissions – can we set the hierarchy up so that a Master Control Owner can still have visibility of controls that then get child controls reallocated to other staff members providing assurance to the Master Control Owner?

If we are treating the Control Lead as the Master Control Owner, then you can allow the hierarchy selected to allow users when assigned as the control lead to have viewership rights of the controls linked down to the control owner level, which would be completed at the risk level. If you were to pair this with the role management role tick box to allow ‘View All Control Authorizer’, this should allow Control Leads to view the controls and make edits based on further permissions granted on the controls at the master level and the risk level.

Open