SAP GRC 10.1 – Mitigation Control Missing

[pedro_carvalho2097]

Hello experts,

We are in GRC AC 10.1 SP7 and for ARA module we are creating a mitigation control. But after create this master data no mitigation control are showed on the list.

In NWBC->Master Data->Mitigating Controls we created a simple mitigation control test with:

• Mitigating Control ID: unique in the system
• Name
• Description
• Organization: created by SPRO > Governance, Risk and Compliance > Shared Master Data Settings  > Create Root Organization Hierarchy
• Process: created by SPRO > Governance, Risk and Compliance > Access Control > Maintain Business Processes and Subprocesses
• Subprocess: created by SPRO > Governance, Risk and Compliance > Access Control > Maintain Business Processes and Subprocesses
• Notes
• 
  

Owner and Monitor are indicated and associated to the Organization;

Only AC component are activate (we not have PC component);

We are not using WF approval (parameters 1061 = NO and 1062 = NO);

If we going to SPRO > Governance, Risk and Compliance > Shared Master Data Settings > Set Up Structure: Expert Mode we can see the mitigation control created below Local Control;

This will impact naturally when we will try to mitigate the risk after a risk analysis;

Anyone knows why we cannot see and use the mitigation control that we just have created?

Best regards

[pedro_carvalho2097 · Accepted solution]

In this case the mitigation control only appears if plan variant of the organizational structure is set to 01. In our case we are using plan variant 013 because we need to import organizational structure from our back end system (in there is set to 013 and we need to replicate this in GRC system for a request approval flow purpose).

Any idea how we can set a different plan variant that is not 01 and maintain the mitigation control functionality on?

Why standard have this behavior between different plan variants and at same time allows changing the plan variant.

Thanks and Regards

[former_member219087 · Accepted solution]

Hi all,

I would like to know in which table the org structure is saved in GRC AC 10?

or where we can find the information maintained in master data (org structure)

Kindly let me know

Regards

KM

[Former Member · Accepted solution]

Hello Basis kaar,

Check the tables HRP1000 and HRP1001.

For further information, you can start your search by typing HRP* in SE16/SE16n

Regards,

Deepak M

P.S: Please go through the rules of SCN and try searching for the same question in forum and then post the discussion as a separate thread please instead of continuing in the old disuccion. Thanks in advance.