I received a notification email about a Granite tool, form, or unit that I am not responsible for. What should I do?

This is usually caused by one of the following: You have been assigned as the handler or responsible person for the wrong form or action, you have been added as a notification recipient for the wrong asset or the asset or unit you are responsible for has a different name in Granite than you expect. Please follow these steps:

Check the email to determine what it relates to:

• Which tool is mentioned in the message (for example, Security Observations or Information Security Risks).
• The unique ID of the form (risk form, control, incident report form, etc.).
• The asset/unit mentioned in the message and any direct link to the form in Granite.

Log in to Granite:

• Verify whether you should sign in using your organisation's internal credentials (AD/SSO). Separate Granite credentials may not be required.
• Open the direct link to the form you are responsible for, or open the tool mentioned in the notification email from the Granite home page. If necessary, use the Filter function and search by the form's unique ID (included in the email notification) to locate the relevant form.

If you find the form in the system, but you are not the correct responsible person:

• Change the responsible person to the appropriate user or remove yourself from the handler/responsibility field, if your permissions allow it.
• If the task has already been completed, mark the form/action as Completed or Closed to stop further reminders.
• Keep in mind that IDs are tool-specific. The reminder may relate to a different tool than you initially checked (for example, a control within Information Security Risks rather than Risk Management).

.

If you cannot find the form in the system or the direct link in the notification email does not open it:
Contact your organization's Granite administrator or the owner of the tool and ask them to:

• Remove you as a handler, responsible person, or notification recipient.
• Grant you the necessary permissions if you need access to the form.
• Verify that you have been added to, or have access to, any related parent form (for example, an incident report form) if the notification concerns an action linked to that parent form.

If you receive weekly summary reminders about overdue tasks:

• Weekly summary emails are sent for forms in which you are listed as a handler or responsible person, which have not yet been moved to a status such as Completed, Processed, or an equivalent status, and where the due date is approaching or has already passed. These forms are still awaiting action from the responsible person. To stop these reminders, either remove yourself from the responsibility field or mark the forms as completed. If needed, your organization's contact person or administrator can provide more detailed instructions on handling forms within the system.

To help your admin user resolve the issue more quickly, include the following information in your message:

• The email subject and the time it was sent.
• The name of the tool and the link.
• The form/action ID and the relevant object or unit.
• A short description stating that you are not the correct responsible person and identifying who the responsibility should be assigned to.

When to contact Granite Support:

• If you suspect a technical issue (for example, the link does not open even though you have the required permissions, you continue receiving notifications after being removed, or the object ID clearly points to the wrong item). Include the information listed above as well as any error messages you have received in your support request.

Updated on: 21/10/2026