Advanced conditions

Set the Condition type to Advanced on control tests to define more flexible conditions using condition collections.

Condition collections have one primary condition, which is applied to the selected table, and one or more supplemental conditions.

When a control test is performed, advanced conditions evaluate in this order:
  1. The system processes the condition collection in the In scope definition reference in this order:
    1. The primary condition is processed on the fields specified in Table and Fields on the control test definition, returning an array of elements.
    2. For each element in the array returned by the primary condition, supplemental conditions are processed, filtering the array of elements further.
    3. The In Scope field is updated with the number of elements in the array.
  2. The condition collection in the Configuration reference is processed on the array of elements returned from the In scope definition. The choices for Configuration to retrieve are:
    • None: These conditions are skipped. Supporting Data is all the elements that are in scope.
    • Matching: The control test checks the array of elements, returning any elements that match the Configuration.
    • Non-matching: The control test checks the array of elements, returning any elements where at least one condition did not match the Configuration.
  3. The final array of elements is recorded as Supporting Data records.

Both the In Scope and Configuration fields refer to the Condition Collection [grc_condition_collection] table.

To define condition collections:
  1. Navigate to IT GRC > Administration > Condition Collections.
  2. Click New.
  3. Populate these fields:
    • Name: Name of the condition collection.
    • Description: Description of the condition collection.
    • Type: Which Control Test Definition field references the condition collection. Choices are:
      • In Scope Definition
      • Configuration Definition
  4. After the condition collection is defined, use the Add Condition related link to add these conditions:
    • Condition: Predefined condition definition from the Condition [grc_condition] table.
    • Condition type: The condition collection Type determines the choices:
      • In Scope Definition
        • Primary
        • Supplemental
      • Configuration Definition
        • Not Applicable
To define new condition records:
  1. Navigate to IT GRC > Administration > Conditions.
  2. Click New.
  3. Populate these fields:
    • Name: Name of the condition collection.
    • Description: Description of the condition collection.
    • Table: Table on which the condition applies.
    • Reference Field: For supplemental conditions, the reference field for the table on which the primary condition is running.
    • Condition: Condition builder for defining the condition.