RAR 5.3 - Risk appears in analysis inspite being mitigated

[Former Member]

I've mitigated a FI risk (F005) for a role. Now when I run role level risk analysis for that role, still the risk (F005) appears inspite the default setting being yes for "exclude mitigated risks". Am I missing something?

[Former Member · Accepted solution]

Hi,

That is correct, you will have to specify the risk id as F005*.

I had a similar issue which was resolved using the * at the end of the risk Id.

Rgds,

Prevo

[Former Member · Accepted solution]

This is because although the Risk ID is actually F005, RAR checks the underlying rules which will be generated in the format of F00500101 or the like!

Simon

[Former Member]

thanks

[Former Member]

Hi Partha,

I believe while mitigating the risks give the Risk id as F005* - Then the roles will not be appeared in mitigation.

Thanks and Best Regards,

Srihari.K