GRC AC 10 - Cross Risk Analysis takes so long

[Former Member]

Hi experts,

We are currently facing some performance issues in a large structure (13 productive SAP systems). We have set up a logical group for cross-system analysis, and the performance is really bad (around 5 minutes to submit an access request due to the automatic risk analysis).

Although there are 13 different system, we launch an analysis for one new user with 2 roles in only 2 systems, and it takes more than 2 minutes. We have about 248 risks. Ruleset is about 100K lines.

Does anyone have faces a similar performance issues? Would you suggest a different configuration? We tried separating the connectors into different logic groups, however that is not a solution as it carries role import issues and duplications.

Our current workaround is reducing the number of systems in the cross-analysis logical group to 4 systems. Obviously this cannot be a definitive solution. We do not understand why the inclusion of systems exponentially affects performance.

Thank you very much in advance.

P.S. Do these amounts of entries sound familiar to you? or you think they might be too many?

[Former Member]

Hi David,

I do not have experience with a large landscape and cross-risk analysis, but you might try Parallel Processing Configuration:

SPRO -> Governance, Risk and Compliance -> Access Control -> Distribute Jobs for Parallel Processing

Try setting to 3 processes, but you should gradually increase it depend upon the runtime and the system memory.

Regarding your question about the # of entries in the rule tables, you should look through the tables to see if there are only entries for LG's, or if there are LG entries AS WELL AS each and every system.  If the latter, you can delete the access rules from the physical systems using program GRAC_DELETE_ACCESS_RULES . There risk analysis may be pulling duplicate risks because there are LGs as well as Physical Systems with rules assigned.  You can always generate the rules again.

-Ken