CMDB and HR integrations continuously add new configuration items and org units, but GRC entities used for control scoping lag weeks behind. What should the entity architecture include?
Select an answer to reveal the explanation.
Short Explanation
If the CMDB grows every night but entities only wake up once a year, compliance is governing yesterday’s city. Wire a refresh cadence so new CIs and org units become entities on purpose. Stale entity lists are how controls miss the new ERP node everyone just stood up.
Full Explanation
Entity architecture must keep governable objects synchronized with their source tables. When integrations feed new CIs or organizational units, a defined refresh or generation cadence—event-driven or scheduled—updates entity membership so scoping and item generation remain current. One-time imports and frozen membership leave newly created assets outside policy and risk coverage.