Mitigating Control in CUP (Compliant User Provisioning)

[Former Member]

1. Are mitigating controls created for support and internal teams or more common for the business side of the companyu2019s needs?

2. If I am trying to create a mitigating control what is the best way for me to make sure I have all of the associated risk as part of the mitigating control that I would like to create?

[Former Member · Accepted solution]

Hi ,

Mitigating controls can be put on riska which cant be remediated. U have to select the risk and associate this with control u create and assign monitor for the action.assign this to user ,so whenever user uses that action mail is triggered to the monitor.Please fallow step by step procedure asper config guide to do this.

Thanks,

Joseph

[Former Member]

Thanks. Do you have a link to the config guide for me to review this?

[Former Member]

Hi,

Go to service.sap.com site,..click on downloads..SAP installations and upgrades..installation and upgrade guides..There Search for GRC documents.u find all installation,operation,configuration,security guides of all GRC components.

Thanks,

JO

[Former Member]

Thanks for your response and that did help me a lot