Ecatt Script for Mass Mitigation controls creation

[former_member294400]

Hi Experts,

I have come across a scenario where we have lots of MC to be created in GRC system,as it takes lots of manual efforts i was looking for a alternative solution where we can create a ECATT script which will save good amount of time.

Can someone advise me if you have come across this where we can create scripts to upload master data for MC using ECATT or any other ways?

As we update MC data from frontend NWBC, if we need to use scripts then we must update Tables directly where MC are stored. What tables do we need for creating scripts for MC? or do we have any steps for the same.

Thank you for the support.

Thanks

Maltesh J

[Former Member]

Hi Maltesh,

you need to refer: http://service.sap.com/sap/support/notes/1749804

This will help you in downloading and uploading the mitigations in mass.

Hope this helps.

Regards,

Ameet

[former_member294400]

Hi Amit,

I have already referred this Snote and this speaks about mass maintainance for mitigation control assignment to user or roles, but i was looking for Mitigation control create not assignment of users to it.

let me know if you are aware about this?

Thanks

Maltesh J

[madhusap]

Hi Maltesh,

Yeah, we also faced the same issue as we need to create nearly 100 mitigation controls in every environment (DEV,QAS and PRD)

Somebody posted in ideas place as to why atleast transport is not possible for the mitigation controls created in Development and sap replied it is due to some technical limitations

GRC AC 10.0 Mitigating control maintenance - transport : View Idea

May be you can check this as well as possible raise it to SAP

Regards,

Madhu.

[former_member294400]

Thanks Madhu, even this link speaks the same hence SAP yet to provide some solution for this, so doing manually is the only option? how did you manage to do it?

Thanks,

Maltesh

[madhusap]

Hi Maltesh,

As of now, we have done manually in each system and I know the pain behind it

We have almost 100 mitigation controls created manually in DEV,QAS,STG and PRD systems.

May be someone from forum should suggest if there is any workaround or enhancement that can be done to automate it. When we raised it to SAP they asked us to put this in ideas place and they will check about it in their next releases.

Regards,

Madhu.

[Former Member]

Maltesh,

Oops, my bad about catching up with your concerns otherway out.

Yes, I am quite well aware of it.

This is indeed a manual work and no automation.

Ameet