Mitigating Risks

Prerequisites

You have created mitigation controls.

Context

On the Assign Mitigation Controls screen, you can assign mitigation controls to risks found during risk analysis and impact analysis.

The screen also allows you to mitigate risks for roles that are not part of the current request. For example, you are currently mitigating risks for John_Current_Request. You can also mitigate risk violations for John_Other_Request1 and John _Other_Request2. Choose the Add pushbutton to add and complete the procedure below for step 4.

Procedure

  1. On the Analyze Access Risk screen, under the Results section, select a risk violation or multiple violations, and then choose the Mitigate Risk pushbutton.

    The Assign Mitigation Controls screen appears. The application uses the information from the risk violation, such as the Access Risk ID, and displays the relevant mitigating control.

  2. To use the mitigating control suggested by the application:

    1. Change the information in the relevant fields as needed, such as the validity dates, the Control ID, and so on.

    2. Choose Submit.

  3. To create a new control:

    1. Choose Create Control and complete the tasks for creating a new control.

    2. Choose Add.

      The application adds an empty line to the mitigation controls list.

    3. Enter information in the relevant fields for the new control.

    4. Choose Submit.

  4. To assign mitigating controls for other roles or requests:

    1. Choose Add.

      The application adds an empty line to the mitigation controls list.

    2. Enter information in the relevant fields for the new control.

    3. Choose Submit.

Next Steps

Creating Mitigating Controls