Can't see who approved a package (Can only see the Notification group)
1. Key information:
- Company / Customer Name: Digital Outsource Services
- OS and Version: Windows 2016
- TM1/PA Version: N/A
- Pulse Version 6.3.1
- Browser Chrome with ad Login
Firstly, we appreciate the Approval Function in Pulse, but we require some items to ensure it covers all the required SOX Controls.
1 - When a Package Approval is requested, one indicates a Notification Group who receives an email. (This is perfect)
2 - When a person, with Approval Rights (Per security Group) approves a Package that allows the execution of the Package. Thats perfect except for enhancement request #4399
Here's where the problem with the Auditors start.
3 - On the Approval Page, one can't see WHO actually approved the request. How can one identify who actually approved the migration.
4 - In the actual Migration Package, it indicates in the 'Approval History' that the item was approved, but again one can't see WHO actually approved the package. It only provides a Notification Group who can exist out of more than one person.
5 - The Auditors then asked who's in our Approval Notification group as that should pinpoint who would have possibly approved it, but then they identified that the list in that group can be changed on demand without history/last modified. So in a Year that group might change and one won't have record who approved the item.
Proposals/Solution
1 - Approval Requests tab, add a column indicating the individuals name who approved the Package. (The 'Submitted To' does not provide the required clarity as that can change over time).
2 - In the 'Migration Package' page, in the 'Approval History' tab, indicate the individuals name who approved the Package. (The 'Submitted To' does not provide the required clarity as that can change over time).
3 - The Execution History page, add a column stating the individuals name who approved the package (Similar to Created By/Executed by).
Impact:
_We can't upgrade to the newer version due to the Auditors not satisfied with the Evidence/Ownership of the Approved By item, there's no link to a individual when a Package has been approved. _