Retired Controls being automatically removed from related lists of Risks Issue When a control associated with a risk is retired, the relationship between the risk and control is getting deleted from the m2m table[sn_risk_m2m_risk_control] as well as their Risk Assessment Instance record in the system.ReleaseAll ReleaseCauseIt is an expected behaviour and can be reproduced in Out-Of-Box instance. Steps To Reproduce : 1. Go to All risks.2. Select any Risk in draft state3. Goto "Control" tab in related list.4. Add any controls (manually/automatically created)5. Try to retire these controls manually. > Observe that the control is removed from the related list of the risk > Observe the relationship between control and risk is also deleted from [sn_risk_m2m_risk_control] table ResolutionAccording to the intended functionality, the risk-to-control M2m relationship table should maintain only active associations. When this relationship is automatically created via a Risk Statement–Control Objective relationship, it is automatically removed if either the related risk or control becomes inactive or retired. The change in the product design was implemented as part of story in version 16.X of the GRC Apps. Workaround :We can create a custom business rule that will run before deleting the record from the [sn_risk_m2m_risk_control] table and abort the action. In this manner, we can prevent the record from being deleted.