CC 5.2: Mitigation Control definition and System

[Former Member]

Hi all,

The definition of a Mitigation Control is associated to certain risk(s) and/or conflict(s).

The definition of a Mitigated User is linked to a Mitigation Control.

Note that system is never taken into account in such definitions.

Assuming we are having a Mitigated User U1 who should be mitigated for system 1 but no for system 2. Which is the best practice used in order to take such restriction into consideration when runnung risk analysis for system 1 and 2?

Thanks in advance. Regards,

Imanol

[Former Member · Accepted solution]

Comment

[Former Member · Accepted solution]

Hi,

This system wise user/role mitigation feature is still not available in GRC AC5.3.

If you have a User U1 in two systems called ECC and BW and you want to mitigate the same user in ECC then it will mitigate in BW also.

Regards,

Sudip Saha

[Former Member]

Hi,

I also have same problem. Can any one clear this please....

want to know whether we can mitigate a user against a particular backend system only when the GRC is connected to multiple backend systems?

Is this possible atleast in latest versions 5.3 SP11 or SP12?

Edited by: dasarad on Sep 2, 2010 5:38 PM