Suggestions to implement the following in GRC ARA

[Former Member]

Hello experts,

We have this function given to us by our compliance team and we need to implement it in GRC.

Currently they are using a custom tool for checking conflicts but now with us implementing GRC 10 they want to migrate over.

We are able to migrate some functions pretty easily but have issue with this one function.

I am attaching a doc with all inputs and any inputs are appreciated.

Also couple of q's about building functions.

1 .We have cross system/single system.What is the purpose of this i.e. can this function be used for any system even though we define action per system in a function

[Former Member · Accepted solution]

Hi Uday,

I will try to explain the conccept of the single and cross system with an example. Suppose you have two functions,Fun1 and Fun2.

Fun1 has the following action

Connector      action

ABC               SU01

DEF               MM01

and the Fun2 has the following actions

Connector      action

ABC               PFCG

DEF               MM02

Both this functions  are part of the risk Risk1.Now if the scope is Single system then the action

rules generated for the Risk1 would be

Rule ID            Connector           Action

0001               ABC                    SU01

0001               ABC                    PFCG             

0002               DEF                    MM01

0002               DEF                    MM02

In case of single system the rules will be generated corrosponding to the same system .i.e. A rule will be created for the system ABC(0001) and a rule will be created for the system DEF(0002).

In case of  cross system the above mentioned rules will be generated and apart from that  the rules

corrosponding to the cross system will also get generated.

Rule ID            Connector           Action

0001               ABC                    SU01

0001               ABC                    PFCG             

0002               DEF                    MM01

0002               DEF                    MM02

0003               ABC                    SU01

0003               DEF                    MM01

0004               ABC                    SU01

0004               DEF                    MM02

0005               ABC                    PFCG

0005               DEF                    MM01

0006               ABC                    PFCG

0006               DEF                    MM02

I hope this will help you understand the difference between single and cross system risk.

Thanks & Regards

Japneet Singh

[Former Member · Accepted solution]

Hi Japneet,

Thanks for the reply sorry couldn't reply back to this mail as I haven't checked the forum for a while.

So if we want to use it for 3 different systems then also it would make sense to use it for single system only.

Thanks

Uday

[Former Member · Accepted solution]

Uday,

It all depends on your requirement. If you buisness does not have any cross system risk then obviously you should just create the risk with the single system scope.

Thanks

Japneet