Mitigating controls can be stored with SAP functions. These reduce the effects on the company when SAP users match with SAP functions. At the same time, you specify how to deal with SAP users or SAP groups that match the SAP function. For example, changing a user assignment to an SAP role in the SAP system can be used as a mitigating control for an SAP function.
Mitigating controls can also be used as controlling measures for compliance rules. Mitigating controls assigned to the SAP functions for testing are automatically transferred into compliance rules about SAP functions.
Prerequisites:
-
Enabled compliance rules are assigned to a functional area and a department.
-
The SAP functions for testing are assigned to the same functional area and then associated variable set of the same department.
To edit mitigating controls
- In the Designer, enable the QER | CalculateRiskIndex configuration parameter.