Skip to Content
avatar image
Former Member

Risk Analysis Difference in GRC 10.0 after Migration from GRC 5.3

Hi Experts,

We have migrated GRC 5.3 to GRC 10.0

The setup works fine in Dev and QA. However in Production we are facing issue with risk analysis. The Risk analysis in GRC 5.3 is different than that in GRC 10.0. The risks are more in GRC 5.3

On further analysis, we understand permission values are not fetched in GRC 10.0

We have executed all the necessary jobs (Auth sync, repository sync, Rules generation, etc) But still facing the issue.

Any idea of what might have gone wrong only in Production environment?

Thanks & Regards,

Vaishali

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

3 Answers

  • Nov 03, 2016 at 12:16 PM

    Hello Vaishali,

    * Permission values are not fetched in rules i.e. in functions OR Permissions not fetched from plug-in system (in GRACAUTHPERM) ?

    * Please also check you have uploaded SoD rules correctly for permission values, often the files are imported where the fields are considered as numbers resulting in incorrect SoD rules.

    For e.g.

    The function in 5.3 is:

    S_TABU_DIS

    ACTVT = 02

    DICBERCLS= Z*

    If file is uploaded in GRC 10, the function becomes like:

    S_TABU_DIS

    ACTVT = 2

    DICBERCLS= Z*

    Kind regards,

    Yashasvi

    Add comment
    10|10000 characters needed characters exceeded

  • avatar image
    Former Member
    Nov 09, 2016 at 02:16 PM

    Hi Yashasvi,

    I checked that permission values are being pulled in GRC 10.0

    However when I compared on basis of Risk ID, there were few which occurred in GRC 5.3 but did not appear in GRC 10.0

    Is this with regards to Risk ID's missing in GRC 10.0? The rule set is same in GRC 10.0 as that of GRC 5.3

    Thanks & Regards,

    Vaishali

    Add comment
    10|10000 characters needed characters exceeded

  • Nov 10, 2016 at 06:14 AM

    Hello Vaishali,

    You mean the risks are missing from GRC 10.0? If yes, the risks IDs are not migrated.

    Please check the files used for upload / migration. I suggest you to check other files as well along with risk file.

    Kind regards,

    Yashasvi

    Add comment
    10|10000 characters needed characters exceeded