Mitigating a Role in CC 5.2

[Former Member]

Hi Gurus,

We are mitigating a role in CC by a mitigating control ..

But when I re run the SOD report i see that the entire risk id gets mitigated whatsoever role was causing the conflict

For eg... If a t code is coming from Z , Y,, Z role...and causing the SOD.. Out of these three roles I mitigated only one role ie Y... When i re run SOD report I find that that Risk id is mitigated for all the roles...

Can anybody suggest something...

Parveen

[Former Member · Accepted solution]

In CC you normally mitigate a Risk using a Control for a selection of Users, Roles and/or Profiles.

However you can mass-mitigate and you have to use the "*" in all the fields for a risk to be mitigated for all users, roles & profiles. It is worth checking that this is not the case.

Have you checked the settings for what is to be included on the reports eg: exclude mitigated risks? This often causes problems.

Have you re-generated the batch Risk Analysis and Management reports having entered the mitigating controls?

[Former Member · Accepted solution]

hi,

let me re phrase my problem....

In fact I mitigated a role and i assume that only that role will move away from the SOD report and all other roles which are causing the same conflict will still appear in the SOD report.

But when I mitigate a role against a specific risk id... Than that risk id gets mitigated for all the roles causing it.. So in SOD reports that risk id appears all together mitigated whatsoever is the role involved. For eg.. A B C D are four roles causing Risk XYZ.. I mitigated only role A and so I expect that the other roles ie B C D should still show the Risk XYZ..But it is not the case..

Parveen

[Vedette · Accepted solution]

Hello Parveen,

I just came across your post and was wondering if you managed to resolve this issue or find out waht causes this to happen.

We have exactly the same problem and I am at the moment still unable to understand why this happens.

Any assistance with this would be much appreciated.

Thanks