Question Re: SAP GRC Access Risk: Alert Notification for New Risk in a Role in Financial Management Q&A

SAP GRC Access Risk: Alert Notification for New Risk in a Role

reza_ahoui2 — Wed, 05 Aug 2020 07:34:05 GMT

After all risks in a role is remediated or mitigated can we setup an alerting mechanism to send notification when a new risk is introduced to the role as per the rule set?

Re: SAP GRC Access Risk: Alert Notification for New Risk in a Role

Monsores — Tue, 11 Aug 2020 23:59:55 GMT

Hi Reza.

It is a good approach to include the risk analysis step in your BRM role maintenance workflow.

But you can also use Risk Terminator to achieve this straight when doing role maintenance in backend systems. It has some limitations like not extending the risk analysis to composite roles in which your changed single role is contained but is really helpful indeed.

You can get more information about it on the following link:

https://blogs.sap.com/2016/02/22/risk-terminator-grc-10/

Regards,

Marcelo Monsores

Re: SAP GRC Access Risk: Alert Notification for New Risk in a Role

reza_ahoui2 — Wed, 12 Aug 2020 07:35:32 GMT

Thanks Marcelo, so I beleive there is no other method apart from BRM and Risk Terminator.