GRC Mitigating Controls

[Former Member]

i was just reading some GRC docs and stumbled upon a term  "Mitigating Controls"

could any one please explain what is this..and whether they are assigned to users or risks.

As per my understanding it is a addition check applied upon a user whick does not allow him complete a transaction unless it is approved by a an approver // moniter.

please correct i am wrong.

rgds..........kk

[rajeshwari_akkamgari]

Hi Krishna,

You can use Mitigating Controls to associate controls with risks, and assign them to users, roles, profiles, or HR objects.

Make individuals as control monitors or approves and then assign them to controls.

You can refer to the help document available at

http://help.sap.com/saphelp_grcac10/helpdata/en/16/7a5f2e29744e078f9305017fee2fc2/frameset.htm

regards,

Rajeshwari