We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation approvers and controllers got migrated but we are not able to map new mitigation approver and controller to the mitigation ids.

[Former Member]

Hello All,

We have migrated data from virsa 4.0 to grc 10.1, all virsa mitigation

approvers and controllers got migrated but we are not able to map new

mitigation approver and controller to the mitigation ids.

The steps we have done below.

1. We have created user id in su01 with necessary authorizations

2. we have declared this user id in Access control owners as a

    mitigation approver and assigned to the organization unit

Now we are trying to map to newly created mitigation approver to the

mitigation id but we are not able to find that approver id for the mitigation ids. (only old mitigation ids came from VIRSA only we are able to see, not able to add new mitigation approvers / controllers to the mitigation ids)

Kindly check this issue, this is very critical for us.

Thanks in advance.

Regards,

Karunakar

[Former Member]

Plaban is correct.  The only owners/monitors that will appear in the selection for a Mitigating Control are those who have been defined in GRC Org Structure.  You must create an org structure and through NWBC-->Setup-->Organizations, you will open a piece of the org structure and map "Owners".

If you have not yet create a Root Org Structure, please refer to the post-installation guide called "GRC10.0 Post-Installation".  You need to do this through SPRO configuration before you can start adding child organizations.

Note: "Owners" for a parent org can be used as Owners for a Child org, but not visa-versa.

-Ken

[Former Member]

Hello Ken / Plaban,

Added mitigation owners to root & child org, same user id is not coming in mitigations (we are not able to find the user id).

We have migrated data from VIRSA 4.0 to grc 10.1 (we are getting data (mitigation owners / controllers) from virsa only.

We are not able to add new mitigation owners / controllers for mitigations id in GRC 10.1 system.

Regards,

karunakar

[Former Member]

Hi Karunakar,

mitigation Control id needs to be mapped to the same org. unit, as owners are. only then, they  will appear.

have you not, added the Mitigation owners/approver in Access Control owner .

regards

plaban

[Former Member]

Karunakar,

First you need to navigate to the "Setup" workspace of NWBC, and add the Access Control Owners appropriately through "Access Control Owners" link under "Access Owners" heading.

Search for the Owner ID and then select the appropriate check boxes.  This step is a prerequisite for ALL owner types in GRC AC 10.0.

After designating the user ID as Mitigation Approver and/or Monitor, the user ID will be available to map in the Org structure as an owner.

If you cannot find the User ID in this window, then you need to make sure your landscape and connections are mapped properly.  Let us know if this step is an issue and I can recommend correctional actions.

-Ken

[Former Member]

Hi Karunakar,

- Assign Owners to Organization unit

- Make these owners as Mitigation Approver and Monitor

- Create Mitigation Id in this Org. unit

Regards

plaban