Process Insight for Infor rules

To review or modify Process Insight for Infor rules:

  1. Select Design > Business Controls > Rule Books on the navigation bar.
  2. Click corresponding to an existing rule book. The details page is displayed.
  3. Click corresponding to a rule on the Rules tab. The details page is displayed.
  4. Review this information:
    Rule Name
    The name of the rule.
    Control Number
    The identification number of the rule.
    Note: This number can be alpha numeric or numeric.
    Control Type
    The type of control based on the rule created. Possible values:
    • Security Controls: Authorizations Insight rules to monitor security models.
    • Transaction Monitoring Controls: Process Insight rules to monitor business transactions.
    Insight
    The name of the Insight for which the rule is created. Select Process Insight for Infor.
    Application (Maximum 2)
    The application for which the rule is created.
    Note: Rules cannot be built on more than two applications.
    Rule Type
    The type of the rules. The Process Insight for Infor has these types of rules:
    • Simple rule
    • Math rule
    • Duplicate rule
    • Baseline rule
    Primary Object
    The primary object on which the violations count is based. Only one primary object can be selected for a rule.
    Note: It is mandatory to select a Primary Object when building a rule condition, else the Infor GRC application will display an error message.
    Other Objects
    The additional objects to create the rule. It is not mandatory to select other objects as the violations count is not based on the additional objects.
    Note:  If the objects selected in the Primary Object field and the Other Objects field are related in the schema, the relationship between these objects is displayed in the Relationship Between Objects section on the Conditions tab.
    Status
    The status of the rule.

    Possible values:

    • Draft
    • In Review
    • Final
    Note: The rules with Final status are considered for an analysis.
    Priority
    The priority assigned to the rule.
    Expiry Date
    The date up to which the rule is valid.
    Note: When selecting an expiry date, select a date in the future. The rule book expires on the specified date and is not available for analysis after this date.
  5. The additional information on the risks associated with the rule in the Risk Description tab.
  6. The reason for the existence of the rule, in the Control Objectives tab.
  7. The documentation for the rule, if any, in the Documentation tab.
  8. The reference documents from IDM (Infor Document Management) or from a third party for additional information, on the Supporting Documentation tab. Select the details and click Add. The selected documents are displayed at the bottom of the New Rule page. Click the document to review the details.
  9. Review this information in the Owners tab:
    Owners
    The user assigned the role of an Owner for the rule.

    The Owners can:

    • Modify the conditions in a rule.
    • Add other owners to the rule conditions.
    Users
    The user assigned the role of a User for the rule.

    The Users can review the existing rule conditions and consider the conditions when creating rules.

    Compensating Controls and Exclusions
    You can review this information:
    • The compensating controls assigned to the rule for mitigating violations. You can assign compensating controls to the rule, using the option.
    • The objects that are excluded from the rule. You can exclude objects , using the option. See Exclusions.
    Note: You can also use this tab to create new compensating controls for assigning to the rule, using the option. See, Working with compensating controls.

    The compensating controls assigned to the rule can also be removed using the option.

  10. Click the Conditions tab to review rule conditions.

    Rules can be built with just one group or multiple groups. A group is a set of conditions. Each group can have one or more conditions separated by an operator. Two or more groups are separated using the operator AND or OR. During analysis,Infor GRC evaluates all the conditions in the first group sequentially and then the conditions in the second group based on the operator.

    • For Simple rule

      Add values and operators to create rule conditions. The values displayed are based on the Primary object selected for creating the rule. See, Simple rule conditions.

    • For Math rule

      Add values and operators to create math rule conditions when computed data is required. Math rule can be created using various templates, math functions, math operators, and brackets. See Math rule conditions.

    • For Duplicate rule

      Add attributes and values to identify duplicate records of an object. The values displayed are based on the Primary object selected for creating the rule. See, Duplicate rule conditions.

    Relationship between objects

    This section is displayed only if the objects selected in the Primary Object field and the Other Objects field have a pre-defined relationship in the schema. The relationship is required for accurate analysis results and must be retained.

  11. Click the Reporting Fields tab to review or select the attributes of the object for which you want to view the violations, if any.
  12. Click Save to save the rule, if modified.