RiskVision notifies system users by email under a variety of circumstances. The user who receives the email notification is almost always determined by the entity or other object ownership.
NOTIFICATION | EMAIL TEMPLATE | RECIPIENTS |
| Assessment Workflow Started | Assessment Launch, Classification Assessment Launch, ERM Assessment Launch, and Risk Assessment Launch | Stakeholders are always notified. Stakeholders includes ‘Primary Owner’ by default. |
| Assessment Restart An assessment is automatically restarted based on recurrence rules | Assessment Recurrence | All stakeholders in the initial stage that are tagged with the notify icon. |
| Exception Workflow Started | Optional Do Not Send Email is the default. | Exception requester is the only stakeholder if Notify selected stakeholder is checked. |
| Ticket Workflow Started | Optional No pre-defined templates. | If Notify selected stakeholder is checked. |
| Workflow Action An action changes a workflow to a new stage. | User-selected. Note: Pull down list for Policy workflow is ‘Content Pack’ choice. Assessment Review, Assessment Review Rejection, Assessment Signoff, Assessment Signoff Rejection, Ticket Review, and Ticket Review Rejection. | All stakeholders of the stage before the change. |
| Escalate (optional) The escalations for different objects can be sent based on the available different date types. | User-Selected Email Template | Escalates to the stakeholders in the current workflow stage. See the note at the end of this section. |
| Reminder The reminders for different objects can be sent based on available different date types. | User-Selected Email Template | Reminds all stakeholders in the current workflow stage. See the note at the end of this section. |
| Ticket Created | Default Ticket Assignment | The user assigned to the ticket. |
| Exception or Ticket Delegated | Exception Delegation and Ticket Delegation | The new assignee. |
| Ticket Exception Expiration Date in a ticket’s ‘Exception Expiration’ field has passed. | Specified in the ticket.exception.expired.notification.template Property | All stakeholders of the current stage. |
| Vendor Account Created | New Vendor Contact Notification | New vendor user. |
| Assessment is Accessed (Optional in all except terminal stages) Assessment is accessed when questionnaire is opened. | N/A | Primary owner. If the primary owner is removed from list of stakeholders, no email is sent. |
| Score Crosses a Threshold A control, compliance, or risk score crosses a specified threshold. | Alert Notification | Selected in the alert rule. |
| A Scheduled Job Completes Successfully | Scheduled Job Completed Successfully | Specified email user. |
| A Scheduled Job Fails | Scheduled Job Failed | Specified email address. |
| A Dashboard or Report is Sent to the User | Report or Dashboard Delivery | The original requestor. |
| Risk Created | Risk Identified | Owner. |
| New Threats or Vulnerabilities are Reported New threats or vulnerabilities are reported from a security research organization. | Threats Advisory Alerts | Control/entity owner. |
| User Account Delegation Notify users of assigned access delegations. | Out of Office Delegation | The user who has been designated as a delegate. |
| Content has Been Changed | Questionnaire Changed Notification | Stakeholders in the current workflow stage. |
 | Workflow escalation and reminders can be sent as one email to all (single email to all stakeholders) or one email to each (email individually to each stakeholder). |
