Mitigation assignment notification

[Former Member]

Hello colleagues!

I have a requirement to notify mitigation owners when their mitigation control was used to compensate a risk without interrupting the access request workflow.

What I've tried:

I've tried to modify standard MSMP for Mitigation assignment just to notify owners. But in this case the initial access request is holding untill the owner takes a decision. Unfortunately, MSMP doesn't have option automatically finishes workflows.

Then I've found a very nice post by Alessandro (I thank him for the post)

It would be ok for me if I send notifications to owners in the end of the day. But, using the report to fulfil my requirement, I couldn't send a mail with these options:

I've found any other ways to resolve my issue without ABAP?

Have anyone faced with a requirement similar to my?

Regards,

Artem

[Former Member]

Hi Artem,

Slightly confused as to what you are trying to achieve. Are you trying to notify a user of a mitigating control being assigned to a user during an Access Request process?

You simply want the request to proceed and not wait upon the control being assigned. Please correct me if I am wrong and totally misunderstanding your aim.

The Alerts function is more for monitoring when a user has performed a already mitigated action/permission.

[Former Member]

Hello Harinam,

Sorry for so slow reply!

...Are you trying to notify a user of a mitigating control being assigned to a user during an Access Request process?

You simply want the request to proceed and not wait upon the control being assigned. 

Yes, you are right.

I want that the controller just be informed that during mitigating control assignment his control was used. I don't need any workflow procedure for MC assignment.

In GRC 5.3 we have this functionality by default. But in the 10 we don't have it...

Regards,

Artem