ARCM - What gets overwritten?

Hi, 

Just wondering if anyone had any advice on the question I raised?

Thanks, 

Leanne

Hi Leanne,

for users having filled out forms in ARIS Risk and Compliance, the form always links to the recent version of that user object. That means, if you have changed the name of an existing user (object), that will be visible at all places where that name is visible. That allows us more easily to fulfill the data protection requirement to anonymize users. 

Especially for users, you should use a new Object instead of re-using an existing one (I guess you would also do that e.g., for email addresses, ..) and only change the existing one, if e.g. it really is only a change of name etc.

Hope that helps you.

Georg

Thanks for clarifying George. 

I think the confusion came, as overwriting control descriptions etc, any completed controls were not affected & were not updated, so we assumed this was the case for all details within a completed control test, but seems this is not the case for user names. 

I'll update our risk & controls team. 

Thanks,

Leanne