Table 29: Configuration parameter for risk assessment
| QER | CalculateRiskIndex |
Preprocessor relevant configuration parameter controlling system components for calculating an employee's risk index. Changes to the parameter require recompiling the database.
If the parameter is enabled, values for the risk index can be entered and calculated. |
Violation of regulatory requirements can harbor different risks for companies. To evaluate these risks, you can apply risk indexes to SAP functions. These risk indexes provide information about the risk involved for the company if this particular SAP function is violated. Once the risks have been identified and evaluated, mitigating controls can be implemented.
Mitigating controls are independent on One Identity Manager’s functionality. They are not monitored through One Identity Manager.
Mitigating controls describe controls that are implemented if compliance SAP compliance was violated, function is met. The next calculation should not find any invalid authorizations for this SAP function once the controls have been applied.
To edit mitigating controls
- In the Designer, set the QER | CalculateRiskIndex configuration parameter and compile the database.
Detailed information about this topic
- One Identity Manager Risk Assessment Administration Guide
To edit mitigating controls
-
In the Manager, select the Risk index functions | Mitigating controls category.
-
Select a mitigating control in the result list and run the Change master data task.
- OR -
Click 
in the result list.
-
Edit the mitigating control master data.
- Save the changes.
Enter the following master data for mitigating controls.
Table 30: General master data for a mitigating control
|
Measure |
Unique identifier for the mitigating control. |
|
Significance reduction |
When the mitigating control is implemented, this value is used to reduce the risk of denied attestation cases. Enter a number between 0 and 1. |
|
Description |
Detailed description of the mitigating control. |
|
Functional area |
Functional area in which the mitigating control may be applied. |
|
Department |
Department in which the mitigating control may be applied. |
After you have entered the master data, you can run the following tasks.
You can see the most important information about a mitigating control on the overview form.
To obtain an overview of a mitigating control
- Select the Risk Index Functions category.
- Select the Mitigating controls category.
- Select the mitigating control in the result list.
- Select the tMitigating control overview task.
