Creating a Mitigating Control For two roles that contain a Risk.

[Former Member]

I am currently trying to create a mitigating control for two roles that currently have a conflict. The conflict is using Risk ID F007 (Reverse Line Items (AB08 and Goods Movement MIGO). AB08 and MIGO are in separate roles; but we have Miticated this risk since MIGO is set ot display only.

I know how to create a Mitigating Control for a single role and for users. We have a lot of users that have this combination of roles and I want to mitigate the two roles as they are conflicting.

Any ideas?

Also, will turning on a mitigating contorl for a user or role; emliminate the flat in Risk Analysis while the mitigating control is Active?

Thanks,

Ryan Dearman

[Former Member · Accepted solution]

Hi Ryan,

Since you have set MIGO to dsiplay why dont you modify the function MM05 to have only migo with the relevant object being checked where the activity is 01. That ways it wont show up on your risk report and you dont have to mitigate it, if it is display only, i believe the risk would be a false positive in anycase.

Regards,

Chinmaya

[Former Member]

Thanks, that will help in a lot of the cases I am entering now.