SAP GRC 10.1 – Mitigation Control Missing

[#1]

Hello experts,

We are in GRC AC 10.1 SP7 and for ARA module we are creating a mitigation control. But after create this master data no mitigation control are showed on the list.

In NWBC->Master Data->Mitigating Controls we created a simple mitigation control test with:

• Mitigating Control ID: unique in the system
• Name
• Description
• Organization: created by SPRO > Governance, Risk and Compliance > Shared Master Data Settings  > Create Root Organization Hierarchy
• Process: created by SPRO > Governance, Risk and Compliance > Access Control > Maintain Business Processes and Subprocesses
• Subprocess: created by SPRO > Governance, Risk and Compliance > Access Control > Maintain Business Processes and Subprocesses
• Notes
• 
  

Owner and Monitor are indicated and associated to the Organization;

Only AC component are activate (we not have PC component);

We are not using WF approval (parameters 1061 = NO and 1062 = NO);

If we going to SPRO > Governance, Risk and Compliance > Shared Master Data Settings > Set Up Structure: Expert Mode we can see the mitigation control created below Local Control;

This will impact naturally when we will try to mitigate the risk after a risk analysis;

Anyone knows why we cannot see and use the mitigation control that we just have created?

Best regards

[alessandr0]

Dear Pedro,

strange issue - can you please check the following:

- limitation of authorization (GRAC_MITC)?

- check your queries (do you have a filter active)?

From my point of view the mitigating control is saved but your are just not able to see it.

Let us know.

Regards,

Alessandro

[pedro_carvalho2097]

Hi Alessandro, thanks for your reply.

I check the points you mentioned:

- Limitation of authorization (GRAC_MITC) = * . The user has SAP_ALL profile;

- Queries: there is no queries activated or any filters apply;

What controls this view? This could be something in webdynpro?

What tables should I consider to analyze?

Thanks

[alessandr0]

Pedro,

check table HRP1000 and HRP5354.

Regards,

Alessandro

[Former Member]

Hi Pedro,

1. have you created mit. control from NWBC. then it should appear, after you assign Monitor and owner, as defined in your Child Org. unit.

     Pre-requsite: Define owners in child org. unit

2. Local Controls in Shared Master data means that they can also be used in PC. Since you are not using PC, it is no meaning viewing that.

Regards

[pedro_carvalho2097]

Hi Pablan,

The owner was assign in Child Org.Unit and in the creation of the mitigation control but still with this the mitigation control still not appear.

Regards