Hi @Valeriia Sappa , Does this mean that the current Missing Lifecycle Information status (yellow - see screenshot) is now obsolete as I don’t think there is any combination that results in that status? Should it be removed?
Cheers
Hi @Helder.Luz ,
there is currently one scenario that leads to missing lifecycle information.
We updated our documentation for a better illustration of the scenarios.
However, I think an unintended behavior is: If an application’s component(s) have no dates, not even an active date, they will show as ‘no risk’. Even if the Aggregated Risk report is not really meant to address data quality, I think it obscures potential data quality issues. To me, a missing Active Date should = Missing Lifecycle Data.
If this isn’t a bug, I would be happy to work with some stakeholders like Helder to ideate on an enhancement if makes sense.
Hi @ian_cts,
this exactly is not considered a problem within the aggregated risk view, because the risk assessment focuses on EOL, not if there is an “active since” missing for any IT component (neither from internal nor from vendor lifecycle)
And there are plenty of scenarios, where active since on internal lifecycle is missing, especially when ITCs are created via reference catalog, discovery services etc.
And these should not interfere with the actual risk that requires some short term actions to decide on.
To validate that IT components have an “active since” and therefore trigger “maintenance activities” around this I would recommend using a classic IT component report view.
However, as mentioned above, when you share it via productboard, I’m happy to start collecting this as an insight. And we might consider introducing some informative status in the future.
Best,
Julia