Stage follow in CUP when risk are mitigated

[Former Member]

Hi,

We haven't implemented Mitigation Controls yet but we have the following question:

In case certain risks are mitigated within CUP by selecting Mitigation Controls, which condition is true afterwards?

Option A) The request includes risks

Option B) The request does not include risks (since they have been mitigated)

The reason of this question is because right now we have define different routes based on the existence or not of risks and we would like to find out what will happened when mitigation controls will be in placed.

Hope I have explained clearly.

Thanks in advance. Kind regards,

Imanol

[Former Member · Accepted solution]

Hi Imanol,

I have not tried this yet, but I beleive this option will be controlled in RAR, if you choose the Ignore mItigated risks options, than it should treat it as no risks.

Thanks!

Chinmaya

[Former Member · Accepted solution]

Hi Imanol,

If you want to ignore risks which are already mitigated then you have to maintain settings in CUP and RAR both.

Go to RAR configuration -> default values -> set 'Exclude Mitigated Risks' to 'Yes'

Go to CUP configuration -> Risk Analysis -> check the box for 'Consider Mitigation Controls'

Regards,

Alpesh