Mitigation control assignment didin't work

[Former Member]

Hello expert,

I uploaded the mitigation controls assignment for some users who have SOD conflicts via GRAC_UPLOAD_MIT_ASGN. I can see the control assignments in "mitigated users" (attached). But when I run the risk analysis for the mitigated users, the SOD conflict still show up (attached).

Why the mitigaton control assignment didn't work? I didn't choose "included mitigated conflicts" at all, and no control showed in the result.

Sincerely yours,

Lynn

[alessandr0 · Accepted solution]

Hi Lynn,

I am wondering a bit why it doesn't get considered as it seems to be correct. Can you run a risk analysis for invalid mitigating controls to see if something comes up?

Please let me know if the mitigation you've upload appear as invalid.

Regards,

Alessandro

[alessandr0 · Accepted solution]

And something else I saw: are you sure the valid from / valid to date is correctly updated?

If I compare the date with the last refresh format it is not similar. The mitigations have format DD-MM-YYYY whereas the refresh is MM-DD-YYYY. Please check accordingly that the date is correctly entered.

Hope you understand what I am trying to tell you.

Regards,

Alessandro

[Former Member · Accepted solution]

Hi Alessandro,

Yes, it's because the valid from date format! Thank you so much!

Thanks,

Lynn

[Former Member]

Hi,

Check for the validity of the mitigation control assignment.

Either the validity is expired or the validity is not in sync with the system validity.

Regards,

Ameet

[Former Member]

Hi Ameet,

Problem sovled. Thank you!

Regards,

Lynn