Add/Update Mitigations

Situations may arise in an organization where you are unable to avoid certain SoD violations; this is where the Mitigation feature can be used to manage these instances in a systematic and controlled manner. For example, when a resource is on leave for a certain period of time, his/her activities may need to be performed by another resource that already has access to some activities which creates a violation. But if the short-term violation is reviewed and approved by the organization, a "mitigation" of the risk has taken place. So when the audit is run, you can see who has mitigated, the reason for the Mitigation, and the time period of the Mitigation.

The status of the Mitigation can be changed to Active or Inactive depending on the organizational requirement. Note that if you inactivate an already active Mitigation, then you must click on the + button and then give the reason for the inactivation and save it.

Step-by-step guide

Navigate to Smart Solutions → Segregation of Duties → Maintenance → Add/Update Mitigations

1. The search console you can find any existing Mitigations or click Add to generate a new one
2. By creating a new one you will need to choose a Model, a User and a Rule
3. Once these have been chosen you can enter a note and an expiry date for the Mitigation
4. Upon pressing save and running a new Validation Process the User who is Mitigated will not show up in Violation any more, rather as a mitigated User
5. Review the Dashboards to ensure the User is now presented as mitigated for the chosen Rule

Related articles

• Page:
  Purge Validation
• Page:
  Process Validation
• Page:
  Proactive SoD
• Page:
  Mass Mitigation
• Page:
  Add/Update Mitigations