Time-based review rule

As a Business Steward or Owner for a domain, you can create Time-based Review Rule assets to trigger the review of assets in your domain, after an elapsed amount of time. This is particularly useful for scheduling reviews of the assets for which data privacy regulations encourage periodic reviews.

Time-based review rules are founded on the cron value specified in the Frequency attribute. At the specified frequency, a Review Request asset is created, prompting a review of the related asset. For more information on cron, see Cron syntax.

To eliminate the chance of overly frequent review requests, the cron value of the Frequency attribute is linked to the value of the Last Modified attribute of the related asset.

You configure a Time-based Review Rule asset to trigger the review of related Technology Assets every 12 months. Suppose, then, that a related Technology Asset is updated for a reason unrelated to your Time-based Review Rule asset. When the changes have been approved, its Last Modified date is updated. In accordance with the cron value specified in your Time-based Review Rule asset, the related Technology Asset will be reviewed 12 months after it was last modified.

Time-based reviews can only be triggered for assets that have the status Accepted or Approved.

You configure a Time-based Review Rule asset to trigger the review of all Business Process assets 12 months after their status becomes Accepted. When the 12 months have elapsed:

  • A Review Request asset is created with the status New.
  • The status of the Time-based Review Rule asset does not evolve; it remains Accepted.
  • The following relation is established:
    • The Review Request asset is related to the Business Process asset by the relation type: [Asset] impacts / is impacted by [Issue].