A municipal utility wants any risk acceptance above a published residual threshold to require senior approval before the register shows Accepted. What should the implementer configure?
Select an answer to reveal the explanation.
Short Explanation
High residual acceptance is like signing a waiver for a big bet — somebody senior should stamp it. Configure the acceptance path so scores over the threshold kick an approval before the status flips. Parking the waiver in a side spreadsheet leaves the register lying.
Full Explanation
Risk acceptance above appetite or a defined residual score typically requires gated approval in IRM. Workflow on the acceptance response enforces that control in-system. Bypassing with offline sign-off, auto-accepting everything, or deleting records undermines governance and reporting.