Identity Manager On Demand Hosted - Risk Assessment Administration Guide

One Identity Manager users for configuring risk assessment Defining risk index functions Calculating risk index functions

Default risk index functions

Risk index for user accounts Risk index for system roles Risk index for hierarchical roles and IT Shop structures Risk index for compliance rules and rule violations Risk index for employees

Defining risk index functions

General data for a function Extended main data of a risk index function Additional tasks for risk index functions

Risk index function overview Assigning source tables

Disabling risk index functions Start calculation Weighting and normalization

Mitigating controls

Defining mitigating controls

Main data for a mitigating control Additional tasks for a mitigating control

Mitigating controls overview Assigning compliance rules Assigning attestation policies Assigning company policies Assigning SAP functions

Calculating mitigation

Risk index calculation example

Extended main data of a risk index function

Enter the following information for a risk index function.

Table 7: Extended main data of a risk index function
Property	Description
Table column (target)	Table column to be calculated.
Calculate immediately	Specifies whether the calculation can be immediately run asynchronously triggered through the DBQueue Processor. If this option is set, the risk index is calculated immediately. For more information, see Start calculation.
Query	Query in SQL syntax, which finds the risk index for each object in the target table.

The columns in the list below must be selected using the query.

For maximum and average value calculation types:
- 1st column: XObjectKey of the calculation object as ObjectKeyTarget
- 2nd column: RiskIndex, RiskIndexReduced, or RiskIndexCalculated from one of the source tables as SourceValue
- 3rd column: XObjectKey of the referenced object as ObjectKeySource, if RiskIndexCalculated or RiskIndexReduced is selected for the 2nd column
For increment and decrement calculation types:
- 1st column: XObjectKey of the calculation object as ObjectKeyTarget
- 2nd column: 1.0 as SourceValue

Query examples

select a.XObjectkey as ObjectKeyTarget, b.RiskIndex as SourceValue from BaseTreeHasADSGroup a 
join ADSGroup b on a.UID_ADSGroup = b.UID_ADSGroup

select p.XObjectKey as ObjectKeyTarget, g.RiskIndexCalculated as SourceValue, g.XObjectKey as ObjectKeySource
from Person p join ADSAccount g on p.UID_Person = g.UID_Person

Additional tasks for risk index functions

After you have entered the main data, you can run the following tasks.

Risk index function overview

You can see the most important information about a function on the overview form.

To obtain an overview of a risk index function

Select the Risk Index Functions category.
In navigation view, open the Risk index functions > <table> > <filter> item.
Select the function in the result list.
Select Function overview category.

Assigning source tables

One Identity Manager obtains all the necessary information for calculating a risk index from the source tables. Specify tables here that cause the risk index to be recalculated when changes are made to the table's data. Source tables are mainly all tables containing risk indexes.

Once an object is added or deleted in a source table or a risk index is changed, a calculation task for risk index calculation is queued in the DBQueue Processor.

To assign a function to a source table

Select the Risk Index Functions category.
In navigation view, open the Risk index functions | <table> | <filter> item.
Select the function in the result list.
Select the Assign source tables task.
In the Add assignments pane, double-click on the icon next to the table you want to assign as source table for risk index calculation.
- OR -

In the Remove assignments pane, remove the tables that are not required.
Save the changes.

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema