Risk analysis only shows SOD risks, no critical action risks

[angeber]

Hi,

We have an interesting issue when performing offline or online analysis in NWBC.

We have setup the ruleset the way that there are 2 types of risks:

1. SoD risks

2. Critical action risks

Basically, the analysis works, because we get results for users on the respective system. However, only risks with risk type "Seggration of Duties" are displayed.

The risks with risk types "critical action" are not displayed, although we checked the box "critical action" in the risk analysis screen.

Lets have a look at the risks and functions:

- The functions are active. They have assigned the correct connector (back end system).

- The risks are active. They have assigned the correct function and have risk type "Critical Action". The risks are assigned to the correct ruleset.

What needs to be mentioned is that the system and thus the ruleset was migrated from 5.3 to 10.1 SP8.

Basically we assume that the migration of Access Control was correct, as we get results for SOD conflicts.

Does anybody have an idea what might be wrong here that we don't receive any hits on critical actions?

Best Regards,

Berrnd

[former_member197694]

Hello Bernd,

Check rules are generated

NWBC-->Rule Setup--> Generated Rules--> Access Rule Summary

Or

NWBC-->Reports & Analytics-->Access Rule Library.

i assume rules are generated

To get result for critical actions in risk analysis

check Analysis scope in Functions

"Make sure that the 'Analysis Scope' for the function is defined as single system instead of SOD"

could you check and re run the risk analysis

Regards

Baithi

[angeber]

Hello Baithi,

thanks for your answer. The 'Analysis Scope' for the function is still defined as single system:

Regards

Bernd

[Former Member]

Hi Bernd,

Does your 'Corporate' Ruleset contain Risks of Critical action. if not, you need to include it.  Can you tick mark 'Include Mitigated risk, and see if you get any Critical Action risks.

regards

plaban

[former_member185447]

Hello Berrnd,

In the result screen, just select Type as Critical action and you will see those results as well.

Regards,

Deepak M

[angeber]

Hello Deepak,

I still use "critical action" in the analysis critera - but it doesn't work

Regards

Bernd

[former_member185447]

Hello Bernd,

In the next screen where you get results, select type as critical action and view the results.

Regards,

Deepak M

[angeber]

Hi Deepak,

but there is still no violation:

The (test)user ANGERBER2 has profile SAP_ALL - so there must be a lot of violations?!?

Regards

Bernd

[former_member185447]

Hello Bernd,

Check if you have maintained SAP_ALL in Critical Profiles and maintained the parameter IGNORE CRITICAL ROLES and PROFILES as YES

Regards,

Deepak M