Identity Manager 9.0 LTS - Administration Guide for the SAP R/3 Compliance Add-on

General main data of a function definition Function definition overview Creating authorization definitions in the Authorization Editor Checking authorization objects for completeness Authorization overview Creating working copi Enabling working copies Exporting function definitions Exporting working copies Assigning mitigating controls to SAP functions

Assigning mitigating controls to a function definition Creating mitigating controls for SAP functions

Defining function instances

Main data for a function instance Function instance overview Checking field variable definitions

Adding variable set for authorization objects

Main data for a variable set Variable set overview Copying variable sets Adding variables used in SAP functions

Exporting function definitions Importing function definitions

Compliance rules for SAP functions

Rule conditions for SAP functions More rule violation reports Mitigating controls for compliance rules with SAP functions

Mitigating controls for SAP functions

Entering main data for mitigating controls Mitigating controls overview Assigning function definitions to mitigating controls Calculating mitigating controls for SAP functions

Configuration parameters for SAP functions Default project template for the SAP R/3 Compliance Add-on Module Referenced SAP R/3 tables and BAPI calls

Mitigating controls for compliance rules with SAP functions

Mitigating controls assigned to the function definitions to be tested are automatically copied to rules about SAP functions. Conditions:

Active rules are assigned to a functional area and a department.
The function definitions to be tested are assigned to the same functional area and to the variable set associated with the same department.

Mitigating controls for SAP functions

Violation of regulatory requirements can harbor different risks for companies. To evaluate these risks, you can apply risk indexes to SAP functions. These risk indexes provide information about the risk involved for the company if this particular SAP function is violated. Once the risks have been identified and evaluated, mitigating controls can be implemented.

Mitigating controls are independent on One Identity Manager’s functionality. They are not monitored through One Identity Manager.

Mitigating controls describe controls that are implemented if an SAP function was violated. The next calculation should not find any invalid authorizations for this SAP function once the controls have been applied.

To edit mitigating controls

In the Designer, set the QER | CalculateRiskIndex configuration parameter and compile the database.

If you disable the configuration parameter at a later date, model components and scripts that are not longer required, are disabled. SQL procedures and triggers are still carried out. For more information about the behavior of preprocessor relevant configuration parameters and conditional compiling, see the One Identity Manager Configuration Guide.

For more information about risk mitigation controls, see the One Identity Manager Risk Assessment Administration Guide.

Detailed information about this topic

Entering main data for mitigating controls

To create or edit mitigating controls

In the Manager, select the Risk index functions > Mitigating controls category.
Select a mitigating control in the result list and run the Change main data task.

- OR -

Click in the result list.
Edit the mitigating control main data.
Save the changes.

Enter the following main data of mitigating controls.

Table 21: General main data of a mitigating control
Property	Description
Measure	Unique identifier for the mitigating control.
Significance reduction	When the mitigating control is implemented, this value is used to reduce the risk of denied attestation cases. Enter a number between 0 and 1.
Description	Detailed description of the mitigating control.
Functional area	Functional area in which the mitigating control may be applied.
Department	Department in which the mitigating control may be applied.

Mitigating controls overview

You can see the most important information about a mitigating control on the overview form.

To obtain an overview of a mitigating control

In the Manager, select the Risk Index Functions category.
Select the Mitigating controls category.
Select the mitigating control in the result list.
Select Mitigating control overview category.

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Identity Manager 9.0 LTS - Administration Guide for the SAP R/3 Compliance Add-on

Mitigating controls for compliance rules with SAP functions

Related topics

Mitigating controls for SAP functions

Detailed information about this topic

Entering main data for mitigating controls

Mitigating controls overview