Identity Manager 8.2.1 - Attestation Administration Guide

After you have entered the main data, you can run the following tasks.

You can see the most important information about a mitigating control on the overview form.

To obtain an overview of a mitigating control

1. In the Manager, select the Risk index functions > Mitigating controls category.

2. Select the mitigating control in the result list.

3. Select the Mitigating control overview task.

Use this task to specify for which attestation policies the mitigating control is valid.

To assign attestation policies to mitigating controls

1. In the Manager, select the Risk index functions > Mitigating controls category.

2. Select the mitigating control in the result list.

3. Select the Assign attestation polices task.

   Assign the attestation policies in Add assignments.

   TIP: In Remove assignments, you can remove the assignment of attestation policies.

   To remove an assignment

   • Select the approval policy and double-click .

4. Save the changes.

The reduction in significance of a mitigating control supplies the value by which the risk index of an attestation policy is reduced when the control is implemented.One Identity Manager calculates a reduced risk index based on the risk index and the significance reduction. One Identity Manager supplies default functions for calculating reduced risk indexes. These functions cannot be edited with One Identity Manager tools.

The reduced risk index is calculated from the company policy and the significance reduced sum of all assigned mitigating controls.

Risk index (reduced) = Risk index - sum significance reductions

If the significance reduction sum is greater than the risk index, the reduced risk index is set to 0.