Multiple mitigating controls assigned to one risk

[Former Member]

Hello experts. We are using GRC compliance calibrator 5.3. We are just starting to implement mitigating controls. The problem we have is we have multiple mitigating controls per risk. Some risks have one control and some have two or three. When we run our risk analysis the resulting report only shows the first mitigating control it finds.

Just wondering if anyone else has this situation. I wanted to check here before I created a message with SAP.

Thanks

Dave

[Former Member · Accepted solution]

Dave,

I think this is how the functionality is. You will have to open a CSS message with SAP.

Regards,

Alpesh