MITIGATION CONTROL CREATION

[Former Member]

Hi

In compliance calibrator while creating mitigation control,in

reports tab there is afield called ACTION,what report name we

has to give.when this report name was used by CC

thanks in advance for reply

[Former Member · Accepted solution]

It is a free text, you can enter anything like "Validation" or you can also enter the transaction names for reference.

The description field is not editable, when you enter some text in action and click Save the description field is also populated with the same text in Action.

Frankly, I don't know the reason.

Best Regards,

Amol Bharti

[Former Member]

As far as I know, that is the report program name/ transaction code, which should be run when a controller reviews the report.

[Former Member]

I think this field was meant as a reference as to what report/transaction you run to mitigate the risk. Based on this and the frequence you put in, the system could check if the monitor actually ran the transactions required for performing the mitigating control.

But, as Amol is saying, this is free text, and you can put whatever you want in there - however, if you put a transaction code (action in GRC speak) it will look up the tranaction text

Note that this is based purely on what I think I remember, so don't go selling this as a feature

/henrik