Skip to Content
Former Member
Jun 16, 2009 at 12:43 PM

Multiple mitigating controls assigned to one risk


Hello experts. We are using GRC compliance calibrator 5.3. We are just starting to implement mitigating controls. The problem we have is we have multiple mitigating controls per risk. Some risks have one control and some have two or three. When we run our risk analysis the resulting report only shows the first mitigating control it finds.

Just wondering if anyone else has this situation. I wanted to check here before I created a message with SAP.