About risk-based task expiry
For assessments that use a risk model, you can configure different task expiry periods for each assessment risk level. When the task is passed on an assessment, it remains valid for the number of days specified for the assessment's risk level, then it expires. The expiry period must be at least 60 days.
For example, you could set an expiry period of 365 days for low risk assessments, 120 days for medium risk, and 60 days for high risk. This means high risk assessments must be successfully re-verified more frequently than medium and low risk assessments.
When the task expires, assessments using the task that are in a Passed state change to In review. This ensures you re-evaluate tasks at intervals that suit their risk level.
An entity may have multiple assessments that require the task. If the assessments have different risk levels, the task expires according to the shortest expiry period of each risk level.
When an assessment isn't using the risk-based expiry configuration option, the task uses the default expiry period, if one is set.
How changes to risk level affect task expiry
If the risk level for the assessment changes at any point, or if you change the task expiry period for a risk level, Maxsight resets the expiry period for existing tasks to the new risk-level expiry period or retains the period of the previous risk level, whichever is shorter, to avoid missed task expiry dates.
For example, let's say you set a task to expire every 60 days for high risk and every 120 days for medium risk assessments. The task is then added to a high risk assessment and is passed on the same day. The task is therefore due to expire in 60 days from this day. Ten days after the task is passed, the risk level of the assessment changes to medium. Maxsight now applies the shorter of the two expiry periods, which in this example is the high risk level expiry period of 60 days, meaning the task is still due to expire in 50 days. When the task expires in 50 days and the risk level is still medium, then the new task version expires in 120 days from the day the new task version is passed.