Identity Manager 9.2.1 - Risk Assessment Administration Guide

One Identity Manager users for configuring risk assessment Defining risk index functions Calculating risk index functions

Default risk index functions

Risk index for user accounts Risk index for system roles Risk index for hierarchical roles and IT Shop structures Risk index for compliance rules and rule violations Risk index for identities

Defining risk index functions

General main data of risk index functions Extended main data of risk index functions Displaying the risk index function overview Assigning source tables for risk index functions

Disabling risk index functions Starting risk index calculations Weighting and normalization

Mitigating controls

Defining mitigating controls

Creating and editing mitigating controls Assigning mitigating controls to compliance rules Assigning mitigating controls to attestation policies Assigning mitigating controls to company policies Assigning mitigating controls to SAP function definitions Displaying mitigating controls overview

Calculating mitigation

Risk index calculation example

Creating and editing mitigating controls

To create or edit mitigating controls

In the Manager, select the Risk index functions > Mitigating controls category.
Select a mitigating control in the result list and run the Change main data task.

- OR -

Click in the result list.
Edit the mitigating control main data.
Save the changes.

Enter the following main data of mitigating controls.

Table 9: General main data of a mitigating control
Property	Description
Measure	Unique identifier for the mitigating control.
Significance reduction	When the mitigating control is implemented, this value is used to reduce the risk of denied attestation cases. Enter a number between 0 and 1.
Description	Detailed description of the mitigating control.
Functional area	Functional area in which the mitigating control may be applied.
Department	Department in which the mitigating control may be applied.

Assigning mitigating controls to compliance rules

NOTE: This function is only available if the Compliance Rules Module is installed.

Use this task to specify for which compliance rules a mitigating control is valid. You can only assign original rules on the assignment form.

To assign compliance rules to mitigating controls

In the Manager, select the Risk index functions > Mitigating controls category.
Select the mitigating control in the result list.
Select the Assign rules task.
In the Add assignments pane, assign the compliance rules.
TIP: In the Remove assignments pane, you can remove assigned compliance rules.

To remove an assignment
- Select the compliance rule and double-click .
Save the changes.

Assigning mitigating controls to attestation policies

NOTE: This function is only available if the Attestation Module is installed.

Use this task to specify for which attestation policies the mitigating control is valid.

To assign attestation policies to mitigating controls

In the Manager, select the Risk index functions > Mitigating controls category.
Select the mitigating control in the result list.
Select the Assign attestation polices task.

Assign the attestation policies in Add assignments.
TIP: In Remove assignments, you can remove the assignment of attestation policies.

To remove an assignment
- Select the approval policy and double-click .
Save the changes.

Assigning mitigating controls to company policies

NOTE: This function is only available if the Company Policies Module is installed.

Use this task to specify for which company policies the mitigating control is valid. You can only assign company policy working copies on the assignment form.

To assign company policies to mitigating controls

In the Manager, select the Risk index functions > Mitigating controls category.
Select the mitigating control in the result list.
Select the Assign company policies task.

In the Add assignments pane, assign company policies.
TIP: In the Remove assignments pane, you can remove company policies.

To remove an assignment
- Select the company policy and double-click .
Save the changes.

Seleziona il prodotto:

Per una maggiore efficacia, compilare l'Obiettivo della chat:

Soluzioni consigliate per il problema

Identity Manager 9.2.1 - Risk Assessment Administration Guide

Creating and editing mitigating controls

Assigning mitigating controls to compliance rules

Assigning mitigating controls to attestation policies

Assigning mitigating controls to company policies