An enabled trigger that never fires must be retired or repaired

Control Statement: A business process that is enabled and triggered, and has not run within a defined period, must be investigated and either repaired or retired.

Description: Where a process is enabled, carries a live trigger, and does not appear in the process log for the review period, either its trigger cannot fire or the work it does is no longer happening. This control requires that the difference be established rather than assumed.

Rationale: Every process in this state represents a belief that is no longer true — somebody thinks this automation is running. That belief is load-bearing: it is why nobody does the work by hand, and why nobody checks. A dormant process is either a broken automation nobody has noticed or dead weight nobody has removed, and both are worth knowing about.

Deciding this control requires the live process log; a configuration index alone cannot answer it.

Audit Procedure:

1. Enumerate the processes that are enabled and carry a trigger.
2. For each, look for executions in the process log across the review period.
3. Record every process with no executions.
4. For each, establish whether the trigger can fire at all — a stale watched column will prevent it (see CIB-TRIG-003).

Remediation:

1. Where the trigger is broken, repair it.
2. Where the process is genuinely obsolete, disable it and remove it.
3. Where the work has quietly moved to a person, record that.
4. Set a review period appropriate to the process — a month-end process will not have run this week.

Default Value: Creatio records process executions but never compares them against the processes that are enabled, and does not report a process that has stopped running.