An enforced review process separates intake, assessment, risk response and approval. Open View status on the demand to perform the action available at each stage.
Intake and assessment
Prepare the draft and submit it for review. An authorised analyst can accept it, request information or reject it during intake. A request for information returns the demand with a message explaining what must be added.
Once accepted, the demand becomes In progress. Analysts refine the context, identify risks, assess current and target exposure and recommend controls. Under an enforced process, requester editing is limited to the applicable drafting or information-request window; submission does not guarantee continued intake editing.
Risk response
When the assessment is ready, the analyst chooses Send for risk response. The requester can review the assessment and provide a response and justification for each risk. This handoff does not grant permission to rewrite the analyst's assessment.
After the response is submitted, analysts review it, approve it or request changes. An analyst can act on the requester's behalf where the workflow permits that action.
Approval and assurance
The configured validation mode determines the required approvals for the current round. Inspect the approval checklist rather than inferring completion from a single participant's action.
If Assurance is enforced, the demand proceeds to Pending Assurance for the final review. An authorised assurance reviewer can complete it or send it back with a reason. Completing the demand records the assessment outcome; linked risk and remediation lifecycles continue independently.
Required messages remain part of the workflow context. Save outstanding assessment edits before initiating a handoff or approval action.