Conflicting and Critical action alerts

[former_member671670]

Hello

Will the program GRAC_ALERT_GENERATION in AC 10 send notification mail only to risk owner or Mitigation monitor as well .

Thanks

Rajendra

[former_member671670 · Accepted solution]

Hello Neeraj ,

sorry , my question was incomplete in the earlier note ... My doubt is whether if we check the send notification check box for Conflicting and Critical Risk alerts ..will the mail triggered to mitigation monitor (the corresponding risk's mitigation control's monitor)  as well apart from risk owner .

Because we have a requirement that if an user who has been mitigated for a SOD risk  executes SOD actions , corresponding mitigation control's monitor should get alerts . Is this possible by standard or we need to change the source code .

Thanks

Rajendra

[Former Member · Accepted solution]

Hello Rajendra,

We had the same requirement during our implementation.

The answer to your query is NO.

SAP GRC AC 10 does not have the feature where this can be possible.

The Critical & conflicting alerts will not be sent to the MITIGATION monitor.

The workaround that we implemented was

We provided access to the Critical & conflicting alerts report in NWBC to the Mitigation Monitors.

The GRC administrator should generate the report on every 15 days basis .

Hence the Mitigation monitor will be able to see the SOD conflicts for the specific user or even the specific risk.

Hope it helps.

Regards,

Victor

[neerajmanocha · Accepted solution]

Hi Rajendra,

As Victor rightly said, it's not available in standard release. You can either adopt workaround given by Victor or can write custom code for this.

Thanks & Regards

Neeraj

[neerajmanocha]

Hi Rajendra,

It depends how you schedule the job. If you select the checkbox "Send Notification" for control monitor,  mail should go to monitor. Refer to screenshot attached.

Thanks & Regards

Neeraj