SAP GRC Risk Management and SAP GRC Process Control Harmonization

[SAPSupport]

How can we link Risk Templates and Central controls?

------------------------------------------------------------------------------------------------------------------------------------------------
Learn more about the SAP Support user and program here.

[SAPSupport · Accepted solution]

There are 2 ways how we can link Risk Templates and Central controls. Each of it is independent on the other.

1. From Risk Management (RM) module:
This is done from risk template OIF, tab "central controls" - this assignment is used in case you create local RM risk based on the template -> once the local risk is created, we create automatically RM responses for these central controls. After that the user need to "Activate" these responses by selecting proper local controls.

2. From Process Control (PC) module:
This is done from central control OIF where you select risk template from the ones assigned to parent central subprocess. Later on this information is copied over to the Local subprocess created based on this central subprocess.
Note: We store the PC assignment and RM assignment in different tables and there is no integration between those.

The main scenario for PC & RM integration is that local PC controls are assigned as RM responses. This can be done either via activation mentioned above, or you can directly assign local PC control from risk OIF.