Decide a risk acceptance
When compliance proposes accepting a risk, it names you as the approver. You see the facts, the residual risk, and any compensating controls before you decide.
Open this guide in VeriProof(opens in a new tab)
Review the request
Open the request in Inbox. Check the justification, residual risk, compensating controls, and review date.
Decide
Approve or reject, and record your reason. You can’t approve a risk acceptance you proposed yourself. Approved risks come back for review on their review date.
Accepting a risk doesn’t mean the deficiency was corrected.