Identity Manager 9.2 - Risk Assessment Administration Guide

One Identity Manager users for configuring risk assessment Defining risk index functions Calculating risk index functions

Default risk index functions

Risk index for user accounts Risk index for system roles Risk index for hierarchical roles and IT Shop structures Risk index for compliance rules and rule violations Risk index for identities

Defining risk index functions

General main data of risk index functions Extended main data of risk index functions Displaying the risk index function overview Assigning source tables for risk index functions

Disabling risk index functions Starting risk index calculations Weighting and normalization

Mitigating controls

Defining mitigating controls

Creating and editing mitigating controls Assigning mitigating controls to compliance rules Assigning mitigating controls to attestation policies Assigning mitigating controls to company policies Assigning mitigating controls to SAP function definitions Displaying mitigating controls overview

Calculating mitigation

Risk index calculation example

Extended main data of risk index functions

Enter the following information for a risk index function.

Table 6: Extended main data of a risk index function
Property	Description
Table column (target)	Table column to be calculated.
Calculate immediately	Specifies whether the calculation can be immediately run asynchronously triggered through the DBQueue Processor. If this option is set, the risk index is calculated immediately. For more information, see Starting risk index calculations.
Query	Query in SQL syntax, which finds the risk index for each object in the target table.

The columns in the list below must be selected using the query.

For maximum and average value calculation types:
- 1st column: XObjectKey of the calculation object as ObjectKeyTarget
- 2nd column: RiskIndex, RiskIndexReduced, or RiskIndexCalculated from one of the source tables as SourceValue
- 3rd column: XObjectKey of the referenced object as ObjectKeySource, if RiskIndexCalculated or RiskIndexReduced is selected for the 2nd column
For increment and decrement calculation types:
- 1st column: XObjectKey of the calculation object as ObjectKeyTarget
- 2nd column: 1.0 as SourceValue

Examples queries

select a.XObjectkey as ObjectKeyTarget, b.RiskIndex as SourceValue from BaseTreeHasADSGroup a 
join ADSGroup b on a.UID_ADSGroup = b.UID_ADSGroup

select p.XObjectKey as ObjectKeyTarget, g.RiskIndexCalculated as SourceValue, g.XObjectKey as ObjectKeySource
from Person p join ADSAccount g on p.UID_Person = g.UID_Person

Displaying the risk index function overview

You can display the most important information about a function on the overview form.

To obtain an overview of a risk index function

In the Manager, select the Risk Index Functions category.
Navigate to Risk index functions > <table> > <filter> in the hierarchy.
Select the function in the result list.
Select Function overview category.

Assigning source tables for risk index functions

One Identity Manager obtains all the information necessary for calculating of a risk index from the source tables. Specify tables here that cause the risk index to be recalculated when changes are made to the table's data. Source tables are mainly all tables containing risk indexes.

Once an object is added or deleted in a source table or a risk index is changed, a calculation task for risk index calculation is queued in the DBQueue Processor.

To assign a function to a source table

In the Manager, select the Risk Index Functions category.
Navigate to Risk index functions > <table> > <filter> in the hierarchy.
Select the function in the result list.
Select the Assign source tables task.
In the Add assignments pane, assign the tables that are required as source tables for the risk index function.
TIP: In the Remove Assignments pane you can remove tables that are not required.

To remove an assignment
- Select the table and double-click .
Save the changes.

Disabling risk index functions

One Identity Manager provides default risk index functions for all assignable company resources. Not all functions are required, it depends on your custom configuration of One Identity Manager. In order to exclude irrelevant functions from the risk index calculation, you can disable these functions. This means, the calculation procedures effected are reset.

To disable functions

In the Manager, select the Risk Index Functions category.
Navigate to Risk index functions > <table> > <filter> in the hierarchy.
Select a function in the result list and run the Change main data task.
Select the General tab.
Click Disabled category.

If this option is already set, you do not need to do this.
Save the changes.

Please select your product:

To serve you better, please complete the Purpose of your Chat:

Recommended Solutions for Your Problem