Mitigation Control Migration From 53. to GRC10

Hello,
Can you please let me know where do I find a templete for downloading Mitigation Controls from 5.3 and how do I upload them in GRC 10?
An early reply would be highly appreciated.
Thank you.

Hello,
Can you share how you migrated the mitigation controls?
While migration of the mitigation controls
I get an error "Creation of object ID 00000000 is not allowed"
I have different buisness processes for risks/functions and the mitigations...Is it something to do with that? or shoudl i create the business processes in GRC 10 before migration?
I am pretty much stuck here...any help is really appreciated.
Thanks,
Raghav

Similar Messages

"Controlled" migration from Tiger

Hi,
I would like if there is some kind of advice, resource, wiki or any other systematic source for helping me to migrate my old mac (MacBook with Tiger 10.4.11) to new MacBook with leopard. I know that there is so called migration assistant, but it probably offers only total copy of all junk and with all junk which is not exactly what I want to do.
I would like to SELECTIVELY move as some setting and data, such as network settings, Mail.app settings, rules, signatures and all emails, iPhoto with it's data, iTunes with settings and all music, iCal, Address book, Adium, Skype, Thunderbird, and some others. I expect as much control as possible, without pitfalls like resetting playcount to 0 on all my music in itunes.
I would not like to loose ANY settings cookies etc related to Safari, since there are sites where I am registered and I do not even know login anymore. It will be probably somehow connected to keychain too, right?
Is something like that even closely possible? Where would one go to find out, which things are used by which app?

Jirka Cech wrote:
Wouldn't it be nice if one can select a checkboxes to copy lets say Keychains and certificates, Mail.app data, rules and setting, iPhoto library, iTunes library, iCal and address book, but not some unorganized apps, trials, downloaded data, temp files and other undesirable binary junk?
How would a programmer at Apple know what any user considers undesirable junk? Maybe half the Mac users I know use some other app instead of (for instance) Mail.app or iCal, so they would want those apps & their associated data & preference files to be included in the checkbox(es). Personally, I use iPhoto very little, preferring to store most image in ~/Pictures/ in my own organizational scheme, so I would want some checkbox options for fine control of what from my home folder gets migrated. The same is true for ~/Music/ -- only some audio files are in the iTunes library; others are intentionally not there to keep from cluttering that app with non-entertainment audio files. Many of the users I know do something similar.
IOW, the number of checkboxes would have to be very extensive to be of much use for fine control of what gets migrated, & even then I'm guessing many users would not see what they wanted.

Mitigating Controls in GRC10

Hi,
Is their a way we can maintain and update mitigating controls on GRC (GUI) back-end.UI can't be able to find those i created and migrated. Any ideas?
Regards, Melvin

Hi,
REF CALL # : 968707 / 2011
I created mitigating controls and imported the old mitigating controls from GRC 5.3.
When I go to the mitigating controls on the UI no mitigating controls appear when opening the page. When I do a drop down (drill) on the TAB (SETUP) Work Centre  Link - Mitigating Control
When drilling down on Mitigating Control IDu2019s
The only two displayed is the ones I created on the UI. When I import the GRC5.3 mitigating controls I get the following
message on the import tool within GRC10 back-end
--Start Loading File - Scenario of 5.3 Mitigation - Migration
sapvirdevexport53/BUNITdata.dat
Mitigation Control EA:BS001 already exists
Mitigation Control EA:BU001 already exists
Mitigation Control SOLMAN99 already exists
--File loaded successfully
The migration document refers to the following steps and this was followed
Why is the screen empty when going into the mitigating control link on the UI - Another strange phenomenon is when I run the mitigating report from report and analytics the mitigating control comes up blank.
When in the report and analytic work centre, and running the mitigation control report - -> I drill down on the Control ID and get the blank screen.
This is why im asking can I look at mitigating controls not from ECC but GRC back-end system and maintain it from their
Regards, Melvin

Bringing mitigating controls from PC to AC in GRC 10.0

Hi ,
I am going through remediation process in GRC 10.0, However there are no mitigation controls setup in AC.
my client is asking me to copy all the mitigating controls from PC to AC.
Is this possible ? if yes, What will be the process ?
Thank you.

Hi Sri,
you can achieve by downloading and uploading the mitigations.
Go to SE38 and use the following program GRAC_DOWNLOAD_MIT_ASSIGNMENTS to download the file and make necessary changes to it and upload the file by using the following program GRAC_UPLOAD_MIT_ASSIGNMENTS.
and put the active column in the file as X.
Regards,
Venugopal Ireni

Transport of mitigation controls from GRC Dev to GRC Production in 10.0

Hi All,
Is there an option to transport mitigation controls from Dev to Prod in 10.0. Where is that option available. We could not find even download or upload option unlike 5.3 in 10.0
Thanks and Best Regards,
Srihari.K

Hi
I can see that this question is marked as answered . Could you please update what steps were taken for transporting mitigation controls? Thanks
Best Regards
Srilakshmi S

Creating Mitigation Control from CUP

Hi Guys,
Is this feature implemented in Access Control???? Or Stills as enhancement

Hi Alpesh
In order to your answer... Can you help me to identify what I doing wrong when I want to approve a mitigate control in CUP.
Path 1 : Approve request
Stage 1: Request
Stage 2: Security
Stage 3: Role Owner
Detour Path:
Type: CUP
Stage: Role Owner
Condition: SoD Review
Detour Path: Path 2
Path 2:
Stage 1: Approval -- > CAD : Mitigation Monitor
The request is send to the Mitigation Monitor but when we try to approve request show the next error:
2010-03-30 14:10:26,390 [SAPEngine_Application_Thread[impl:3]_25] ERROR Mitigation control TEST_5.1 could not be saved for user PRUEBAGRC_6
com.virsa.ae.core.BOException: Exception from the service : Mitigation record doesn't exist
     at com.virsa.ae.accessrequests.bo.MitigationControlBO.insertMitigationControl(MitigationControlBO.java:207)
     at com.virsa.ae.accessrequests.bo.MitigationControlBO.saveMitigationControls(MitigationControlBO.java:321)
     at com.virsa.ae.accessrequests.bo.RequestBO.callAEExitService(RequestBO.java:6993)
     at com.virsa.ae.accessrequests.bo.RequestBO.callExitService(RequestBO.java:6748)
     at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:6600)
     at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:6393)
     at com.virsa.ae.accessrequests.actions.RequestViewAction.confirmRequestApproval(RequestViewAction.java:949)
     at com.virsa.ae.accessrequests.actions.RequestViewAction.execute(RequestViewAction.java:104)
     at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:461)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
     at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
     at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:461)
     at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
     at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
     at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
     at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
     at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
     at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
     at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
     at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
     at java.security.AccessController.doPrivileged(Native Method)
     at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
     at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
Caused by: com.virsa.ae.service.ServiceException: Exception from the service : Mitigation record doesn't exist
     at com.virsa.ae.service.sap.MitigationControlWS52DAO.checkForSuccess(MitigationControlWS52DAO.java:832)
     at com.virsa.ae.service.sap.MitigationControlWS52DAO.executeUpdateUserMitigation(MitigationControlWS52DAO.java:287)
     at com.virsa.ae.service.sap.MitigationControlWS52DAO.insertUserMitigation(MitigationControlWS52DAO.java:309)
     at com.virsa.ae.accessrequests.bo.MitigationControlBO.insertMitigationControl(MitigationControlBO.java:195)
Can you help me please?? All URI are OK.
Thanks !!!!
Edited by: Karen_sans on Mar 31, 2010 7:45 PM

Control Center problem (Following migration from 9.2)

Hi,
I've performed migration from 9.2 to 10.2 following chapter 3 of the install guide. I can deploy / upgrade my objects OK using my default control center but if I try and debug a mapping it cant connect. The debug info pane sits on 'Connecting to Control Center schema' and then pops up with an error offering a retry.
Im stuck as to whats wrong, I've set up a new control center, re-registered my target location with that and still I cant debug.
Has anyone seen this before following a migration?
Thanks in advance !

did you check whether synonym exist in the database? use below sql to see the synonym.
select SYNONYM_NAME,owner,TABLE_NAME,TABLE_OWNER from dba_synonyms where SYNONYM_NAME='XMLCONCAT';
Regards

Mass maintenance of Mitigation controls in GRC 10.0

Dear All,
How to do mass maintenance of mitigation in ARA of GRC 10.0. We successfully migrated the mitigation controls from 5.3 to 10.0. I need to change the monitors for many user conflicts and also add new user conflict mitigation controls. Is it possible to do a mass changes in GRC 10.0 as there is no upload functionality for mitigation controls
Thanks and Best Regards,
Srihari.K

Hi Sri,
you can achieve by downloading and uploading the mitigations.
Go to SE38 and use the following program GRAC_DOWNLOAD_MIT_ASSIGNMENTS to download the file and make necessary changes to it and upload the file by using the following program GRAC_UPLOAD_MIT_ASSIGNMENTS.
and put the active column in the file as X.
Regards,
Venugopal Ireni

How to Migrate from SAP BO XI 3.1 system to SAP BI 4.1

Hello Gurus,
I got a new project and I have to start Upgrade and Migration from BO XIR3.1 to BI 4.1. Please help me out here. More detail are given below. Appreciated in advance.
1.1 Technical Scope
Installation of only a production SAP BI 4.1 environment.
Repository is currently on DB2 but will be on SQL Server for the BI 4.1 implementation.
All VMware machines: The new architecture calls for 12 VM servers.
Row-level Security in the universe for authorization of content and Enterprise for Authentication (no SSO). Matrix security model with custom level groups which gives Basic, Intermediate, and Advanced level users to pre-defined folders and content.
Migrate content (objects, universe and instances) from SAP BO XI 3.1 to SAP BO BI 4.1 for the technical upgrade, the details are below:
Universes will stay in the UNV format and will not be converted to UNX.
Only WebI Documents
All Controlled Folders - (~5600 documents)
174 Total objects in Public Documents folders (All documents to upgrade & remediate)
5,433 Total WebI reports in Corporate and other folders (All documents to upgrade, & remediate)
User Folders – (~6,000 documents)
6000 + Webi documents accessed in 2013 ( All 6000 + documents to upgrade, NO remediation)
Inbox – None will migrate
Total Documents to remediate: up to 5,607
Migrate all universes and connections
Migrate all Xcelsius and agnostic documents with no remediation.
The estimated report count for remediation by complexity, Low-1525, Medium-150 and High-50.
Assumes a 10% report remediation effort described earlier sections
Report remediation: should it exceed the base assumptions made in this document, will be implemented as a Change Order. Effort for such change will be mutually agreed between parties. Price to project is determined using this effort and blended rates.
Testing:
Conduct planning and inventory analysis; Reusable templates for Migration Plan, Validation.
Perform migration
Use the Right Sized Testing framework to plan and conduct testing
Use the automated Reports Compare tools to compare large volumes of excel / xml data
Templates based remediation– ensures quality control
Thanking you best regards.
AK.
Message was edited by: Simone Caneparo
reduced title length

Hello Mark,
Thanks for your help. Appreciated.
Do you know or some one know, how to create at report for Audit purpose of BO 3.1 Universes's Connection, Database type, Network Layer and so on... I want to pull all info in to Webi report which are you seeing in the pictures.
Please see the attached file.

Error while uploading mitigation controls

Dear All,
While uploading the mitigation controls i am facing with the below error. Can you please help me in resolving this error.
Error in table dataVIRSA_CC_MITUSER
SQL:=>Insert into VIRSA_CC_MITMON(MITREFNO,MONITORID) Values(?,?)
Record::Line Number :21 : D VIRSA_CC_MITMON TESTC1 TEST1
Below is the text file which i am uploading into the RAR for test purposes
M     VIRSA_CC_ADMIN     USERID     NAME     EMAILID     ROLEID
D     VIRSA_CC_ADMIN     TEST1     TEST1     test     M
M     VIRSA_CC_BUSUNIT     BUSID
D     VIRSA_CC_BUSUNIT     TH
M     VIRSA_CC_BUSUNITT     BUSID     LANG     DESCN
D     VIRSA_CC_BUSUNITT     TH     EN     Thailand
M     VIRSA_CC_BUAPPVR     BUSID     APPROVERID
D     VIRSA_CC_BUAPPVR     TH     TEST1
M     VIRSA_CC_BUMONITOR     BUSID     MONITORID
D     VIRSA_CC_BUMONITOR     TH     TEST1
M     VIRSA_CC_MITREF     MITREFNO     BUSID     APPROVERID
D     VIRSA_CC_MITREF     TESTC1     TH     TEST1
M     VIRSA_CC_MITREFT     MITREFNO     LANG     DESCN
D     VIRSA_CC_MITREFT     TESTC1     EN     Test mitigation control
M     VIRSA_CC_MITRISK     MITREFNO     RISKID
D     VIRSA_CC_MITRISK     TESTC1     F006*
M     VIRSA_CC_MITMON     MITREFNO     MONITORID
D     VIRSA_CC_MITMON     TESTC1     TEST1
M     VIRSA_CC_MITRPT     MITREFNO     ACTIONS     VSYSKEY     MONITORID     FREQUENCY
M     VIRSA_CC_MITUSER     MITREFNO     RISKID     USERID     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_MITROLE     MITREFNO     RISKID     ROLEID     VALIDFROM     VALIDTO     MONITORID     STATUS
D     VIRSA_CC_MITROLE     TESTC1     F006*     Z1.*.ASST-SC-FINC-MGR     6/9/2010     7/25/2010     TEST1     0
M     VIRSA_CC_MITHROBJ     MITREFNO     RISKID     HROBJ     HROBJTYP     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_MITPROF     MITREFNO     RISKID     PROFILE     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_MITUSRORG     MITREFNO     RISKID     USERID     ORGRULEID     VALIDFROM     VALIDTO     MONITORID     STATUS
M     VIRSA_CC_DETDESC     OBJECT_TYPE     OBJECT_ID     LANG     DETAIL_DESCN
D     VIRSA_CC_DETDESC     MIT     TESTC1     EN     Test Mitigation control
We are not mitigating users now. Only roles are getting mitigated and hence we have not provided any values to the MIT USER table.
Thanks and Best Regard,
Srihari.K

Dear Varun,
Thanks for your reply. It helped me a lot. But however i am facing the following issue while uploading the mitigation controls
After exporting the mitigation file from RAR, we opened the text file in a spreadsheet format and added few lines to the file and saved in the same text format or in UTF-8 format also
After uploading the same into RAR again after changes we are facing similar errors mentioned in above query.
But when we add lines directly in the wordpad and upload the file then it is successful.
We have to add so many mitigation controls and roles to be assigned for which excel would be easy way to dump.
Is there anything wrong we are doing here in editing and converting the files.
Thanks and Best Regards,
Srihari.K

Detect obsolete mitigating control assignments?

Hello,
What report/s would you use to detect obsolete mitigating control assignments?
The scenario is: A user has been assigned a mitigating control, let's say during the CUP workflow, to mitigate a certain risk that came with a certain role. Later, that role is removed from the user. Now the user is in the scope of a mitigating control. However, the user is not even subject to the risk in question anymore.
Which way (periodically?) could you detect these cases and clean up the mitigating control assignments?
Thanks and regards
Patrick

Hey,
My experience of cleaning up controls has not been very straight forward.
I have had to perform various risk analysis reports and look up a list of user accounts that have been marked as "Expired" etc.
It can be slightly more difficult if, like many organisations, you decide to assign a control with a infinite validity period (i.e. 12.12.9999).
The Business and Internal Control team need to be very proactive about regularly monitoring the controls and reviewing the assignments. This is one reason why I strongly recommend that controls are only assigned for a set period (i.e. 365 days/1 year), so a compulsory review takes place by the control owners/business on a regular basis. This makes the controls much more affective, robust and fit for purpose.
Happy to hear other's opinions and ideas.

LabVIEW DSC: Migration from 6.1 to 8.6 problems

Colleagues,
I need help from someone who experienced with LabVIEW DSC. I would like to recompile pretty old application written in LabVIEW 6.1/DSC 6.1 to LabVIEW 8.6, and got lot of troubles with this.
At the first I have tried to migrate my old scf file as described here: "Migrating from LabVIEW DSC 7.1 to 8.0".
Well, it seems to be OK, and LabVIEW.lvlib library with variables was created, but when I tried to double click on the some items, then exception occurred in LabVIEW (see dsc_exception.png in attachment).
Can you please open test project (attached to this post) and double-click on the Slave005_A0 Item? Is crash happened only by me or by someone else?
The second problem with understanding.
In LabVIEW DSC 6.1 I have used "Read Tag.vi" / "Write Tag.vi" vis for accessing the items. When my VI opened in LabVIEW/DSC 8.6, then these calls replaced with "legacy_Write_Tag_(analog)7x.vi" (see screenshot). I'm unable to found according VIs in DSC 8.6. How can I write/read my tags in the latest version? As far as I can understand, I can use Shared Variables directly. Is this correct? But then how can I read multiple tags? Through DataSocket VIs?
The same with "legacy_Get_Tag_List7x.vi". How can I get items list in DSC 8.6 programmatically?
Or should I leave all legacy* vis in my application?
thanks in advance and best regards,
Andrey.
Attachments:
dsc_exception.png ‏26 KB
dsc_legacy_Write_Tag.png ‏3 KB
TestProject.zip ‏4 KB

Hi Andrey,
Yes, my LabVIEW crashes as well. As you may have noticed, a lot has changed in LabVIEW 8.0 with regards to DSC, the most important being that tags are replaced with Shared Variables. I would recommend that you go through each variable and create them by yourself to ensure the most reliable performance.
If you are interested in reading 'tags', then you just need to drag the Shared Variable and place it on the block diagram (that's the direct way). If you are interested in doing this programatically, then have a look at the DSC Module -> Engine Control -> Variables & I/O Servers -> Get Shared Variable List palette on the block diagram. You can then use DataSocket to access the Shared Variables.
Don't leave the legacy VIs on your block diagram. Upgrade your whole project; shared variables are here to stay. Have a look at the following article to get a thorough understanding of them:
Using the LabVIEW Shared Variable
Let us know if you have more questions.
Adnan Zafar
Certified LabVIEW Architect
Coleman Technologies

Very difficult migration from MS Access to Oracle with SQL Developer

Dear Developers
I have tried to used for one Project Oracle Sql Developer Migration from Access to Oracle (Application Express). Was about an evaluation if Oracle Express (with Application Express) or Mysql (with PHP) as target database.
I am working with Oracle for 14 years and i earn my money in projects related with Oracle. Of course i am sentimental and i push every time when an opportunity comes to have as an option Oracle.
This time beside my sentimental approach the decision was different.
I will tell you why and i hope that someone there will listen and make something for a better Product.
I was trying yesterday the whole day to migrate an Microsoft Access database. A nightmare....
1. Microsoft Access Exporter 2000 was too slow. For a 25 MB Access database, running time was 15 Minutes. And 15 minutes to obtain an undocumented error. I followed your instruction and eliminate all references etc... as you described in HELP. a lot of time necessary to read and do..... After that i obtained an Error #..16. Sorry that i don't provide you with an exact number error. i don't have it right know and personally i am not interested anymore. For this error i don't find nothing in forums about it.... Search again and again..... Every time after waiting 15 Minutes in which you don't know exactly what application does or if really does something. I decided to delete sequentially macros, modules, forms, querys from Access database and see where Exporter stops... Time and time lost for trying and searching.... Finally i obtained my XML file only by keeping my Access tables. The file was produced even if i obtained at the end Error #5:..... Because was an error i am not really sure if the file was completly consistent with my database.
2. I followed the next steps and with some errors (enabling, disabling constraints, objects couldn't be created because of different reasons) i had my Model and Oracle Schema. I have tried to export the data from Access and import it in Oracle. data exported was in UTF8 and SQL Loader Control file doesn't have
LOAD DATA
character set utf8
So i tried to add the string "character set utf8" in my dozens of CTL files - with a freeware of course.....
Maybe you can say that if i knew that from the beginning i would have set my character set in SQL Developer. I don't know and i will not ever try with this product!
So finally after hours of working and trying and playing with my nerves, reading a lot of forums and documentation, i had an Oracle schema, maybe incomplete because of different errors at so much migration stages.
And now i have tried for the first time in my life MySQL Migration Toolkit. I read that for migration to MYSQL this tool is what i needed.
I recommend you to try the product and see something about the quality required for a piece of software. Is not enough if your product runs OK with Nortwind DEMO Access database. It should run OK with all ACCESS databases.
With the tool i have done the job in 5 MINUTES. Simple, efficiently and without errors. At the end i had the SQL Scripts and the DATA imported in the database.
Difficult to say something now. I am sentimental but i asked mysef if you can do something to improve the quality of the product.
What arguments can we provide for a client in Migration from Access to Oracle ???? Can you honestly answer at that?
Please try this MYSQL Migration Toolkit.....Maybe this give you some ideas about simple tasks and about what we really need...
Best regards
Adrian

Dear Barry and Kgronau
Thank you very much for your response. My Post was after a long day of trying to import an MDB file.
Maybe you can understand why i was so angry...
Yes i understand that your tool try to do more than other even if actually you don't really convert too much.
From Modules to make some procedures where the whole code is commented! .....
For other MDB which i tried to import in APEX the forms where really not usable. Queries are full of errors requires most of the time manual corrections.
I am sorry that i can not provide you with this MDB which cause these problems.
Data and software doesn't belong to me and the company which own it can not provide to you.
What i hope from your product is, even when errors come, to show a better error explanation. At what object in Access error ocures ? This is very important because i can correct my MDB or just delete the module,form,query in cause if SQL Developer doesn't like it....
Just showing an error Error #.... doesn't help me too much. And if an error occurs i don't know if program continues to work or is dead. No information about this. Maybe you can show that your application is alive and does something (working status etc...) ! Anyway we wait long minutes in front of dead screen....
Again, thank you very much for your attention
Adrian

Workaround for non-SAP mitigating control reminders

Dear all,
Our business users would like to document mitigating controls in RAR 5.3 regardless of whether they are connected with an SAP report. They would also like to receive email reminders for those controls.
Unfortunately, the frequency of the control can only be defined per connected SAP report and reminders will only be sent for controls if the SAP report has not been executed.
Have you been exposed with a similar requirement? It seems like a natural thing to ask from a business perspective. RAR 5.3, however, is not designed in that way.
Have you come up with any feasible workarounds for this?
My current approach would be to create a dummy Z-report per SAP system (such as Z_MANUAL_MITCTRL) that control monitors have to call once to confirm the execution of their control.
Cheers and best regards
Patrick

Hello,
Regarding your question, in fact this is dependant on how your UME (User Management Engine) is configured on your WAS (Web Application Server). If the UME is connected to your R/3 back-end then the user need to have a R/3 account to connect to CC, otherwise if your UME is "independant" then you just need to create an account in the UME.
Regards,
Jérôme.

Migration from VIRSA 4.0 to GRC 10.0 (ARA)

Hi Guys,
We've just migrated from VIRSA 4.0 to GRC 10.0. We have only two connectors configured ECC and Finace System.
Rules have been generated and we're using the standard "global" ruleset. The rules seem to be generated successfully ( I've checked in the NWBC that the permissions appear after the risk generation and also I've checked some tables like GRACSYSRULE and GRACACTRULE and risks appear there).
When running a risk analysis report at user level in both the system VIRSA 4.0 and GRC 10.0 the no. of conflicts matches where as no. of mitigation doesnot match.Due to this mis-match we are not in a position to go 100% LIVE with GRC and decommisioning VIRSA. We use concept of mitigated roles and not users. Raised the concern with SAP too 2 weeks back and no luck yet.
Does anyone faced a similar issue? can you give me some light in order to solve the issue?
Many Thanks!
Ratan Roy

Hi Andrzej,
Thanks for the reply.
I have one more simple question: how can I change the Violation or Mitigation counts to any RISK Ids?
Say for example:I wanted to make changes in violation and mitigation counts in below mentioned risk.
Access Risk ID
Risk Description
No. of Conflict
No. of Mitigation
SOD Object
F020
Open closed periods previously enter incoming payments
72
45

Mitigation Control Migration From 53. to GRC10

Similar Messages

Maybe you are looking for