When approval on ARM, cannot mitigate risk

[Former Member]

Hi Expert,

I try to create access request use ARM with the following step :

1. Create access request to add several role (when risk analysis will have several violation)

2. When on approval screen, I can see all violation is not mitigated

3. On risk violation screen, i run risk analysis and click mitigate risk

4. But, when i want to mitigate risk. The screen just give me blank mitigation like the following print screen :

*In my understanding, this screen usually will show all risk need to be mitigated (not blank like the following print screen)

5. When i tried to add manually, the system say "enter a valid system " and I cannot assign any mitigation control

Currently I'm on SAP GRC 10.0 (SP level 26).

Please help, did any one know why I cannot assign mitigation control and when I want to Assign mitigation control the screen just blank ?

(just show risk description without risk ID)

Thank you

Regards,

Hendy

[madhusap]

Hi Hendy,

Can you share the details of mitgating control (screenshot) you have created for the risks reported in this Access request?

Regards,

Madhu

[Former Member]

Hi Madhu,

Sorry for late reply. Currently I have 1 general control for all risk in my ruleset.

I didn't undestand why on new SP level, SAP GRC will show blank form (Screen shoot i give before).

Thank you

Best Regards,

[RameshVithanala]

Hi Hendy,

I agree you are having issue assigning mitigation control from access request, but would like to know how its behaving when you try to assign the mitigation control from the user level analysis?

Thanks

Ramesh

[madhusap]

Hi Hendy,

Have you created the mitigating controls for the corresponding risks in GRC?

To assign a mitigating control, first you have to create mitigating controls for the risks and during mitigation assignment they will be shown in the screen.

Regards,

Madhu

[Former Member]

Hi Mashu,

Thank you for your respond. I'am already created mitigation controls for the corresponding risks in GRC.

What i didn't understand is, when I want to mitigate risk on ARM. The screen just give me blank screen like the following :

Is that something configuration to fix this ?

Thank you

Regards,

Hendy