# Notifications ### Prerequisites Email notifications must be enabled by your administrator under **Extra > Settings > Enable email notifications**. Your CISO Assistant instance also needs an outgoing mail server configured. If you are not receiving emails, contact your administrator. Notifications are sent to the email address associated with your account. *** ### Notification types #### Assignments You receive an email whenever something is assigned to you. | Object | Field to fill | Your role | | ------------------------- | --------------- | ---------------------------- | | **Applied Control** | **Owner** | You are added as an owner | | **Compliance Assessment** | **Authors** | You are added as an author | | **Risk Scenario** | **Owner** | You are added as an owner | | **Task** | **Assigned to** | You are added as an assignee | *** #### Deadlines & Expiry reminders CISO Assistant sends reminders automatically **30 days**, **7 days**, and **1 day** before a deadline or expiry date. These emails are sent every morning. **For reminders to fire, both fields below must be filled in.** **Applied Control** | Notification | Required field | Who receives it | | ------------------ | --------------------------------------- | --------------- | | ETA expired | **ETA** (past due, status not *Active*) | **Owner** | | Expiry approaching | **Expiry date** | **Owner** | **Compliance Assessment** | Notification | Required field | Who receives it | | -------------------- | -------------- | --------------- | | Due date approaching | **Due date** | **Authors** | **Evidence** | Notification | Required field | Who receives it | | ------------------ | --------------- | --------------- | | Expiry approaching | **Expiry date** | **Owner** | **Validation Flow** | Notification | Required field | Who receives it | | ----------------------------------------- | ----------------------- | --------------- | | Deadline approaching (flow still pending) | **Validation deadline** | **Approver** | **Task** | Notification | Required field | Who receives it | | -------------------- | -------------- | --------------- | | Due date approaching | **Due date** | **Assigned to** | > **Note for recurring tasks**: reminders are automatically skipped if the recurrence interval is shorter than the reminder horizon (e.g., a daily task will not receive a 7-day warning). *** #### Overdue alerts If a deadline has already passed and the item is still open, you will receive an overdue alert. | Object | Required field | Alert sent to | | --------------------------------- | ------------------------------ | ------------- | | **Applied Control** — ETA expired | **ETA** + **Owner** | Owners | | **Evidence** — expired | **Expiry date** + **Owner** | Owners | | **Task** — past due | **Due date** + **Assigned to** | Assignees | *** #### Compliance assignment workflow When working on a **Requirement Assignment** inside a compliance assessment, notifications follow the review workflow automatically — no extra fields to fill. | Event | Who is notified | | ------------------------------------------------------------- | ----------------------------------------------------- | | Assignment activated (*Draft → In progress*) | Assignee | | Assignment submitted for review | Reviewers (falls back to authors if none are defined) | | Assignment reviewed (approved / reopened / changes requested) | Assignee | *** #### Validation flows | Event | Who is notified | | ------------------------------------- | -------------------------------------------------- | | Validation flow created and submitted | Approver | | Validation flow status changes | Requester or approver, depending on the transition | *** #### Account notifications | Event | Who is notified | | ------------------------ | ------------------------------------------- | | Account created | You (welcome email with login instructions) | | Account created via SSO | You (welcome email) | | Password reset requested | You (reset link) | *** #### Third-party questionnaires (TPRM) If your organisation uses the Third-Party Risk Management module, external contacts receive an email when a questionnaire is sent to them. This email contains a link to fill in the questionnaire. *** ### Quick reference — what to fill in | If you want this notification… | Fill in these fields | | -------------------------------------------- | -------------------------------------------------------- | | Remind owners when a control ETA expires | **Applied Control › Owner** + **ETA** | | Remind owners before a control expires | **Applied Control › Owner** + **Expiry date** | | Remind authors before an assessment deadline | **Compliance Assessment › Authors** + **Due date** | | Remind owners before evidence expires | **Evidence › Owner** + **Expiry date** | | Remind an approver of a validation deadline | **Validation Flow › Approver** + **Validation deadline** | | Notify assignees of upcoming task due dates | **Task › Assigned to** + **Due date** | *** ### Frequently asked questions **I am not receiving any emails. What should I check?** First confirm that email notifications are enabled with your administrator. Then verify that your account email address is correct in your profile. Finally, check your spam folder. **I filled in the fields but still got no email. Why?** Check that the field contains an exact date — reminders are sent only on specific days (30, 7, and 1 day before). If the deadline is sooner than 30 days from when you set it, the 30-day reminder will not fire. **I am receiving too many reminders. Can I opt out?** Per-user opt-out is not yet available. **At what time are reminders sent?** Reminders are sent in the early morning (between 6 AM and 7 AM server time). **Will I get a reminder every day until the deadline?** No. Reminders are sent only on specific days: 30 days before, 7 days before, and 1 day before the deadline. Overdue alerts are sent daily until the item is resolved. --- # Agent Instructions: Querying This Documentation If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question. Perform an HTTP GET request on the current page URL with the `ask` query parameter: ``` GET https://intuitem.gitbook.io/ciso-assistant/guide/notifications.md?ask= ``` The question should be specific, self-contained, and written in natural language. The response will contain a direct answer to the question and relevant excerpts and sources from the documentation. Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.