Risk Mitigation approval in CUP

Hi All
I am trying to mitigate a role for a specified risk. The workflow gets successfully trigerred from RAR and is shown to the approver in CUP. However when the approver tries to approve the request in CUP, system shows an error "Error Processing your request, Request no.__ in stage: CC_MITOBJ"
Can someone help me out in resolving this.
Thanks
Nitin

Hi,
I am not getting the link to Mitigate the riks for the Roles requested from CUP. when I am trying to select the risk to mitigate after the Risk Analysis is done from RAR and the report is fetch to CUP no links are showing. It shows error on the screen "Correct the following errors: Select a risk."
The message "Error on page" shows in the bottom left corner of the browser. I can not go any further to mitigate the risk.
The soluition was put to import the AE_init_append_data.xml as instructed n the A 5.3 installation guide. This file contains lines for background color that ar enecessary for display of the Risk. each support package of 5.3 has this file and is delivered in the .SAR file, and this should always be updated if delivered.
I have tried this and still falling to Mitigate the risk as the problem remains. May I know if you have some other solution or if you can provide me with the correct and update file for above request.
Thanks,
Abhimanyu

Similar Messages

  • CUP 5.3 (SP11) Risk Owner Approval in CUP workflow

    Hello Experts,
    I have a question...
    When you create a risk in RAR, is there any way you can send an approval request automatically to a Risk Owner already set in RAR?
    Unfortunately, there is no such option for risk in the CUP custom approver determinator.
    We want to set risk owners different from business process owners,* and risk owners are the ones responsible for risk approval.
    *We don't want to set the "business process" as an approver determinator.
    I would appreciate your advice.
    HM

    When you create a risk in RAR, is there any way you can send an approval request *automatically* to a Risk Owner already set in RAR?
      - CUP (Page 19/33)?
    Unfortunately, there is no such option for risk in the CUP custom approver determinator.
    There is - Request Type - Attribute
    Please have a look at the following document to create RISK (RAR) approval workflows in CUP (Page 19/33 - CAD):
    http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/e03cd86c-3aa7-2a10-1aa6-e845902f555d?quicklink=index&overridelayout=true
    Thanks
    Himadama

  • Problem with workflow to control mitigating RAR to CUP

    We have configured in RAR, the workflow to send request for approval of Mitigation Owner using CUP Workflow. For Mitigation Control Using RAR  work fine, but unfortunately when we mitigated the Risks through the CUP request,  the workflow of Mitigation Control was not started.
    Workflow: USER > MANAGER > ROLE OWNER.
    Workflow with risk: USER>MANAGER> MITIGATION OWNER> ROLE OWNER (We have problem to send the request for Mitigation Owner).
    In the attached file has the details of this problem.
    Let me know if you need any other information.
    Best Regards,
    William Pantaleao

    Yes, it is configured correctly misc.
    Thanks
    William Pantaleã

  • Error in Provisioning Risk Update Request in CUP

    Dear Experts,
    I have configured all the required settings to configure Risk create/Update and change workflow in CUP.
    I am even successfully generate the requests type Create Risk in CUP from RAR.But , not able to generate request type update risk from same path and recieving error provisioning request at stage -
    Please provide any clue to resolve this issue.I am in SP12
    Thanks,
    Mukesh

    Please find..
    I am trying to remove a function from the below risk ID in RAR.
    getting this error when approving in CUP.
    2011-04-19 09:15:29,943 [SAPEngine_Application_Thread[impl:3]_74] ERROR com.virsa.ae.accessrequests.bo.RequestExitServiceHelper : callExitService() :   : Exception in calling the exit service,  error code : -1, error message : ERROR: Risk: B001 has exceeded the maximum number of rules (46,655) that can be generated for a risk
    2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : updateRolesForProvision() :   : INTO the method for reqno : 1116
    2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : updateRequestApplicationForProvisionStatus() :   : INTO the method for reqno : 1116
    2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : updateRequestApplicationForProvisionStatus() :   : listApplicationDTOs : []
    2011-04-19 09:15:29,946 [SAPEngine_Application_Thread[impl:3]_74] DEBUG com.virsa.ae.accessrequests.bo.RequestBO : insertRequestApplicationForProvisionStatus() :   : INTO the method for reqno : 1116
    2011-04-19 09:15:29,948 [SAPEngine_Application_Thread[impl:3]_74] ERROR Exception in calling the exit service,  error code : -1, error message : ERROR: Risk: B001 has exceeded the maximum number of rules (46,655) that can be generated for a risk
    com.virsa.ae.service.ServiceException: Exception in calling the exit service,  error code : -1, error message : ERROR: Risk: B001 has exceeded the maximum number of rules (46,655) that can be generated for a risk
         at com.virsa.ae.accessrequests.bo.RequestExitServiceHelper.callCCExitService(RequestExitServiceHelper.java:277)
    Thanks,
    Mukesh

  • ARQ: Risk Mitigation Mandatory and Request Forward causing problem???

    Hi,
    I have a scenario where in, at a certain stage, "Risk Mitigation" is made mandatory and also "Forward Request" option is available at this stage for the same approver.
    What is happening is that, when this approver tries to approve the request without mitigating the risks, it gives error message and request can not be approved. This is fine and going as per the configuration.
    Now the same approver is trying to forward the request to some other person for some business reasons (with "WITH RETURN" check box checked and disabled). This request is reaching to the desired recipient as expected. But the problem is that, when after providing his comments (a business requirement before mitigating risks, if need be) if he tries to approve (submit) the request, application gives the same error message that: "Request can not be submitted. Mitigate Risk XYZ"!
    Due to this, request can not be submitted and sent back to main approver! I noticed that, the request still lies on the same stage and the same stage configuration is being considered for this forwardee too!
    This is keeping the request hanging as this forwadee is not authorized to mitigate the risks.
    Can any one please help me resolve this?
    Regards,
    Faisal

    Alessandro,
    Thanks for your reply.
    Now I see (as confirmed) that we have technical limitation or application design that when we forward a request, it DOES NOT change the stage (even I noticed this). So I was thinking that only we have "SUBMIT" button to send it back to the main approver.
    But as you said, this forwardee can use the same "Forward Request" option instead of "Submit" button. This looks the option here which suits the situation.
    But can you please tell me if we can do something to inform the forwardee that he must select "Forward Request" option and not Submit button?
    Because, this submit button is visible and he can click it without knowing! And then this error message of Mandatory risk analysis then appears!
    Is there any work around?
    Please advise.
    Regards,
    Faisal

  • Risk Analysis in a CUP request

    Is there any way to run a Risk Analysis in a CUP request on different Rule Sets?
    Letu2019s say you have 3 different Rule Sets like US - EU u2013 Global defined in RAR. Each one includes its own risks. In a CUP
    request, it shows risks based on the u201CVirsaCCRiskAnalysisServiceu201D defined in your CUP config.
    In our case we use the global Rule Set but the problem is for an EU request you can have US risks appearing that must be mitigated even if those risks are not relevant for EU.
    It would be great if we could link the attributes Company or Functional Area directly to a specific rule set.
    Please help/comment on this issue.
    Regards

    Hi,
    When we perform risk analysis on the request, ruleset for the risk analysis for CUP request is picked from RAR default values.
    RAR-> Configuration-> Default Values-> Default rule set for risk analysis.
    This rule set is picked by CUP to perform the risk analysis.
    With the current design it is not possible to link  the attributes Company or Functional Area directly to a specific rule set.
    Kind Regards,
    Srinivasan

  • We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation approvers and controllers got migrated but we are not able to map new mitigation approver and controller to the mitigation ids.

    Hello All,
    We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation
    approvers and controllers got migrated but we are not able to map new
    mitigation approver and controller to the mitigation ids.
    The steps we have done below.
    1. We have created user id in su01 with necessary authorizations
    2. we have declared this user id in Access control owners as a
        mitigation approver and assigned to the organization unit
    Now we are trying to map to newly created mitigation approver to the
    mitigation id but we are not able to find that approver id for the mitigation ids. (only old mitigation ids came from VIRSA only we are able to see, not able to add new mitigation approvers / controllers to the mitigation ids)
    Kindly check this issue, this is very critical for us.
    Thanks in advance.
    Regards,
    Karunakar

    Hi Karunakar,
    - Assign Owners to Organization unit
    - Make these owners as Mitigation Approver and Monitor
    - Create Mitigation Id in this Org. unit
    Regards
    plaban

  • Risk Owners approval using ABAP Function class

    Dear All
    I have implemented ABAP function class ZCL_GRAC_WFA_RISK_OWNER to identify the risk owners once the role approval is done, the Workflow is working fine with one exception.
    My scenario is like this - i have mapped P059 risks to PR risk approver coming from PR role, S007 risks is mapped to SD risk approver coming from SD role, so when the role owner have approved both the roles, i would like to send seperate risk approval requests to 2 diff risk approvers as per my mapping.
    But currently P059 & S007 risks are routed to both approvers at the same time & when one of them approves the risks - both risks get approved & provisioning is taking place.
    i would like 2 risk approval to be put in place - any idea on how to acheive this?
    Naveen

    Dear Hari
    Thanks for your response.. Yes i have implemented the note 1670504..
    As mentioned earlier i have checked my Risk approval Stage setting with both options "ALL APPROVERS" & "ANY ONE APPROVER"
    but still when one of the risk owner approves all the risks are get approved & the provisioning is completed.
    PFA
    Do let me know if you have any more options.
    Naveen

  • Risk Mitigation ..

    Hi..
    How to handle the data if the server is suddenly down.. what happened with the data which is getting processed in the server..
    As a risk mitigation.. what are the pre-configurations needs to be done to avoid the data loss ..
    regards
    Kishore

    Hi..
    Risk mitigation:
    Incase of
    1. server downtime.
    2. Recovery of data
    3. Incase if we need to delete the uploaded data in SAP R/3 (For example to clear the material master data uploaded since golive for certain reasons)
    4. Legacy system downtime
    5 Diaster recovery
    Can you help on how to take preventive steps for the above cases..
    regards,
    Kishore..

  • Risk analysis after approval in CUP

    Hi,
    Can it be possible? CUP to do automatic risk analysis after the request is approved by the role approvers.  If there are no risks, roles will get provisioned. If risks exist based on the risk ID to have the request forwarded to the risk owner where the mitigation control, monitor details are entered.
    Please provide your inputs.
    Thanks
    R R

    Not a good idea, generally.
    What you can do is have the risk analysis performed automatically on request submission. The approvers would see the risks, but you can allow them to ignore them and have a detour on the last approval step.
    This has a few quirks:
    - if your last approval is a role approver, i.e. there may be a split approval to several people, the detour is tricky.
    - if one of the approvers changes something in the request, the risk analysis is invalid.
    I would also question the general idea - usually in case of risks, one of the approvers should also take action. If all they do is approve, get them out of the way.
    Unfortunately there is no step that says "automatic risk analysis, no manual approval required". That's an enhancement I would also welcome.
    Frank.

  • Error when trying to approve a mitigation control in CUP

    Hi,
    I have created a Mitigation Control in RAR and set-up the necessary workflow. The request ends up in CUP and the approver is able to see the request when he/she logs in, however the approver cannot approve or reject the request.
    The following error messages appear:
    - Approve: Error processing your request, Request no: 2 in stage : MITIGATION
    - Reject: Error rejecting request no: 2
    I have check the workflow many times now and I have also checked the mitigation URL's.
    Any idea what the problem can be?
    Thanks.

    Thank you for your response. No the approver is not part of the DL. I just added the approver to the workflow (CAD).
    Please find log details below:
    2010-03-18 16:09:32,729 [SAPEngine_Application_Thread[impl:3]_8] ERROR Service call exception; nested exception is:
         com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://vgrdci.sap.client.co.za:51900/VirsaCCWFExitService5_2Service/Config1?style=document"
    java.rmi.RemoteException: Service call exception; nested exception is:
         com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://vgrdci.sap.client.co.za:51900/VirsaCCWFExitService5_2Service/Config1?style=document"
         at com.virsa.ae.request.ws.cc.Config1BindingStub.execWFExitService(Config1BindingStub.java:87)
         at com.virsa.ae.request.ws.cc.Config1BindingStub.execWFExitService(Config1BindingStub.java:96)
         at com.virsa.ae.accessrequests.bo.RequestExitServiceHelper.callCCExitService(RequestExitServiceHelper.java:263)
         at com.virsa.ae.accessrequests.bo.RequestExitServiceHelper.callExitServiceForApprovedRequest(RequestExitServiceHelper.java:51)
         at com.virsa.ae.accessrequests.bo.RequestBO.callExitService(RequestBO.java:5335)
         at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:5174)
         at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:4967)
         at com.virsa.ae.accessrequests.actions.RequestViewAction.confirmRequestApproval(RequestViewAction.java:928)
         at com.virsa.ae.accessrequests.actions.RequestViewAction.execute(RequestViewAction.java:103)
         at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:271)
         at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:425)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
         at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:455)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
         at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:455)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(AccessController.java:219)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:104)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:176)
    Caused by:
    com.sap.engine.services.webservices.jaxrpc.exceptions.InvalidResponseCodeException: Invalid Response Code: (401) Unauthorized. The requested URL was:"http://vgrdci.sap.client.co.za:51900/VirsaCCWFExitService5_2Service/Config1?style=document"
         at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.handleResponseMessage(MimeHttpBinding.java:998)
         at com.sap.engine.services.webservices.jaxrpc.wsdl2java.soapbinding.MimeHttpBinding.call(MimeHttpBinding.java:1449)
         at com.virsa.ae.request.ws.cc.Config1BindingStub.execWFExitService(Config1BindingStub.java:80)
         ... 33 more

  • Creating Mitigation Control from CUP

    Hi Guys,
    Is this feature implemented in Access Control???? Or Stills as enhancement

    Hi Alpesh
    In order to your answer... Can you help me to identify what I doing wrong when I want to approve a mitigate control in CUP.
    Path 1 : Approve request
    Stage 1: Request
    Stage 2: Security
    Stage 3: Role Owner
    Detour Path:
    Type: CUP
    Stage: Role Owner
    Condition: SoD Review
    Detour Path: Path 2
    Path 2:
    Stage 1: Approval -- > CAD : Mitigation Monitor
    The request is send to the Mitigation Monitor but when we try to approve request show the next error:
    2010-03-30 14:10:26,390 [SAPEngine_Application_Thread[impl:3]_25] ERROR  Mitigation control TEST_5.1 could not be saved for user PRUEBAGRC_6
    com.virsa.ae.core.BOException: Exception from the service : Mitigation record doesn't exist
         at com.virsa.ae.accessrequests.bo.MitigationControlBO.insertMitigationControl(MitigationControlBO.java:207)
         at com.virsa.ae.accessrequests.bo.MitigationControlBO.saveMitigationControls(MitigationControlBO.java:321)
         at com.virsa.ae.accessrequests.bo.RequestBO.callAEExitService(RequestBO.java:6993)
         at com.virsa.ae.accessrequests.bo.RequestBO.callExitService(RequestBO.java:6748)
         at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:6600)
         at com.virsa.ae.accessrequests.bo.RequestBO.approveRequest(RequestBO.java:6393)
         at com.virsa.ae.accessrequests.actions.RequestViewAction.confirmRequestApproval(RequestViewAction.java:949)
         at com.virsa.ae.accessrequests.actions.RequestViewAction.execute(RequestViewAction.java:104)
         at com.virsa.ae.commons.utils.framework.NavigationEngine.execute(NavigationEngine.java:295)
         at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:431)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
         at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:461)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.doWork(RequestDispatcherImpl.java:321)
         at com.sap.engine.services.servlets_jsp.server.runtime.RequestDispatcherImpl.forward(RequestDispatcherImpl.java:377)
         at com.virsa.ae.commons.utils.framework.servlet.AEFrameworkServlet.service(AEFrameworkServlet.java:461)
         at javax.servlet.http.HttpServlet.service(HttpServlet.java:853)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.runServlet(HttpHandlerImpl.java:401)
         at com.sap.engine.services.servlets_jsp.server.HttpHandlerImpl.handleRequest(HttpHandlerImpl.java:266)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:386)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.startServlet(RequestAnalizer.java:364)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.invokeWebContainer(RequestAnalizer.java:1039)
         at com.sap.engine.services.httpserver.server.RequestAnalizer.handle(RequestAnalizer.java:265)
         at com.sap.engine.services.httpserver.server.Client.handle(Client.java:95)
         at com.sap.engine.services.httpserver.server.Processor.request(Processor.java:175)
         at com.sap.engine.core.service630.context.cluster.session.ApplicationSessionMessageListener.process(ApplicationSessionMessageListener.java:33)
         at com.sap.engine.core.cluster.impl6.session.MessageRunner.run(MessageRunner.java:41)
         at com.sap.engine.core.thread.impl3.ActionObject.run(ActionObject.java:37)
         at java.security.AccessController.doPrivileged(Native Method)
         at com.sap.engine.core.thread.impl3.SingleThread.execute(SingleThread.java:102)
         at com.sap.engine.core.thread.impl3.SingleThread.run(SingleThread.java:172)
    Caused by: com.virsa.ae.service.ServiceException: Exception from the service : Mitigation record doesn't exist
         at com.virsa.ae.service.sap.MitigationControlWS52DAO.checkForSuccess(MitigationControlWS52DAO.java:832)
         at com.virsa.ae.service.sap.MitigationControlWS52DAO.executeUpdateUserMitigation(MitigationControlWS52DAO.java:287)
         at com.virsa.ae.service.sap.MitigationControlWS52DAO.insertUserMitigation(MitigationControlWS52DAO.java:309)
         at com.virsa.ae.accessrequests.bo.MitigationControlBO.insertMitigationControl(MitigationControlBO.java:195)
    Can you help me please?? All URI are OK.
    Thanks !!!!
    Edited by: Karen_sans on Mar 31, 2010 7:45 PM

  • Trigger mitigation workflow within CUP

    Hi,
    I have configured the necessary workflow types, Mitigation controls and Mitigation objects. I am able to trigger workflow when I create a control in RAR. How do I go about triggering workflow within CUP?
    Currently, when I create a request, in one of the stages a risk analysis is mandatory. I am able to create or assign an existing mitigation control before the workflow process can continue. This works well. However, I would like a workflow to be triggered when somebody clicks on the 'create' mitigation control button as well as when somebody assigns an existing mitigation control.
    Any input would be highly appreciated.
    Thanks
    Mo

    Hello Muhammad,
      What you are saying is that you wish to trigger workflow from within CUP itself when you are assigning/creating mitigation control from within CUP, right? If i got that right then i would say that it is not possible. For mitigation control creation/assignment the trigger is only RAR application and be done through that only. Since for such workflows the request types would be type MITCTRL  and MITOBJ and not CUP..
    I nice feature though if it would have been there. In case i got anything wrong, then kindly elaborate so that i could get clarity.
    Regards, Varun

  • CUP 5.3 (SP12) Risk Analysis Errors in CUP

    Hello Experts,
    When I run risk analysis in CUP for user provisioning. I get an error message:
    Risk analysis failed: Exception in getting the results from the web service : Service call exception; nested exception is: java.lang.Exception: Incorrect content-type found 'text/html'
    Connector names are the same across all the components. We have a CUP test environment with SP11, and we did not have this kind of errors. I virtually tried everything I could.
    If you can, please assist me.
    HM

    Hello HM, 
    I had this error when I first upgraded to SP12 but I don't know if it is a SP issue or not.
    My CUP --> RAR SOD Analysis works for me on SP12.
    You might try double checking the following:
    1. Check all CUP configuration Web Service parameters in CUP --> Configuration --> 1) Risk Analysis & 2) Mitigation.
    2. Check that you uploaded the latest UME roles that were delivered with SP12.
    3. Check the UME user that is configured in CUP for risk analysis to make sure the password is still correct and that it has enough assigned roles.
    4. Make sure you uploaded all the required XML configuration files to CUP --> Configuration --> Initial System Data.

  • How to verify Risk Analysis done for CUP request?

    We are on GRC 5.3 SP 13.
    Is there a way to verify whether a Risk Analysis was performed during a stage for a CUP request?
    We have a CUP request that should have generated a SOD Risk when it was processed.  However the closed request shows no risk or mitigations on it.  The approvers say they ran a Risk Analysis, and the workflow stage does have that set as mandatory.  Also, you do get SODs if you run a User Analysis for this userid in RAR directly, so it looks like the request should have had them also.
    Is there any way to verify whether a Risk Analysis was actually performed in the CUP request workflow stage?
    At this point I don't know if this is a problem with the CUP Risk Analysis, or if the user just didn't run one and the system let that  slip thru somehow.
    Thanks.

    I bellieve you can log into RAR>RAR Debugger>View Server Log>You can search on Analysis.  If your are getting any errors they will also show up here. 
    Example: 
    INFO: Foreground : Analysis starts:
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.meng.ObjAuthMatcher <init>
    FINEST: ObjAuthMatcher constructed: 0ms, #singles=11, #ranges=0, #super=0
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
    INFO: Foreground : Analysis done: 55550000 elapsed time: 49 ms
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
    INFO: Foreground : 1 out of 1 (100%) done
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis
    INFO: Foreground : All Analysis done,  elapsed time: 64 ms , memory usage: free=782M, total=2048M
    Mar 9, 2012 3:44:23 PM com.virsa.cc.xsys.riskanalysis.AnalysisEngine performActPermAnalysis

Maybe you are looking for

  • Recipe Management error while creating Recipe

    Hi, While creating recipe in Recipe Management (Tcode: RMWB), in the process tab, I am unable to create a STAGE no. When I try to create stage (4 digit numeric) it gives me an error message "Change number 500000000000 does not exist" Long text of err

  • A Few Questions Before Installing Windows 7 in Boot Camp...

    1. New Mac Pro compatible with both 32 and 64 bit Windows 7? 2. What is the minimum safe amount of space needed on the boot camp drive partition to Windows 7 to operate with no issues? 3. If one no longer needs the boot camp partition nor windows can

  • Re-installing my Adobe Photoshop Elements 10 on my Macbook

    I have a Macbook Pro, OSX Version 10.9.2 which does not have a disc drive on it. I would like to reinstall my Adobe Photoshop Elements 10 onto it, but am having difficulty with figuring out how.... can someone PLEASEEE help me with this? Thank you ve

  • Invoice Print - How to customize using XML

    We want to customize Invoice Print using XML. Currently it is in PDF format. When we define the data defintion, what xml schemea needs to be put for Invoice Print and where can I find the file .xsd related to Invoice Print. Similary we want to do it

  • Is it possible to delete your iCloud backup while you're restoring from it?

    I was restoring my phone from an iCloud backup when all of a sudden my phone kept yelling at me that my iCloud storage was full. I mindlessly deleted the OLD backup from which I was restoring from to make room for the new one. I'm not sure if my phon