Hello Experts,
I am working on GRC ARA and have a query regarding Mitigated Profiles.
The scenario I am trying is, we have a User - USER_A, to which a Role - Role_B having risk is assigned. The Profile of this Role, say Profile_C is mitigated using Mitigated Profiles Link.
Also, Param Id 1033 -'Include Role/Profile Mitigating Controls in Risk Analysis', in AC configuration setting is set to 'YES'.
So, when we perform User Level Risk Analysis on USER_A, should the Mitigation done at Profile level be displayed in the result of User Analysis ?
Thanks in Advance.
Regards,
Hira