GRC 10.0 RAR report not showing mitigation control for mitigated risks

[Former Member]

Hi Folks,

Risks are mitigated in GRC system and can be seen in GRACMITUSERS table.

However when i run RAR for a users in NWBC, there comes out to be open risks.

This is quite weird, can you please tell me what can be the possible reason.

Nishant

[madhusap]

Hi Nishant,

Just in case checking:

Do you have Include Mitigated Risks checkbox checked (Parameter 1030)when runinng risk analysis at user level from NWBC?

Regards,

Madhu.

[Former Member]

Hi Madhu,

Parameter 1030 is not activated in Risk Analysis in GRC system. As i told it was working fine before say 2 hrs back. Also the Dev GRC system is working fine currently without this parameter field.

Regards,

Nishant.

[Former Member]

Hi Nishant,

Are you running the risk analysis "Offline" or "Online" mode?

If "offline", double check the last Batch Risk Analysis run and ensure the data is up to date.

also, may be worthwhile to double check the validity periods of the mitigating controls and if they have been applied on all systems or on selected systems for the user.

[Former Member]

Hi Harinam,

Configuration Setting- Parameter 1027 - Enable Offline Risk Analysis is set as NO.

The RAR reports is online, i can assure you that.Please check following screen shot for your reference

Thanks,

Nishant.