Process Insight for Infor rules

To add Process Insight for Infor rules to a rule book:

  1. Select Design > Business Controls > Rule Books on the navigation bar, click the arrow option corresponding to a rule book to display the details page.
  2. Click New to add a rule. The New Rule page is displayed.
  3. Specify this information:
    Rule Name
    The name of the rule.
    Control Number
    The identification number of the rule.
    Note: This number can be alpha numeric or numeric.
    Control Type
    The type of control based on the rule created. Possible values:
    • Security Controls: Authorizations Insight rules to monitor security models.
    • Transaction Monitoring Controls: Process Insight rules to monitor business transactions.
    Insight
    The name of the Insight for which the rule is created. Select Process Insight for Infor.
    Application (Maximum 2)
    The application for which the rule is created.
    Note: Rules cannot be built on more than two applications.
    Rule Type
    The type of the rules. The Process Insight for Infor has these types of rules:
    • Simple rule
    • Math rule
    • Duplicate rule
    • Baseline rule
    Primary Object
    The Infor GRC business objects for creating a condition. The primary object is the object on which the violations count is based. Only one primary object may be selected for a rule.
    Note: It is mandatory to select a Primary Object when building a rule condition, else the Infor GRC application will display an error message.
    Other Objects
    The additional objects to create the rule, if required. It is not mandatory to select other objects as the violations count is not based on the additional objects.
    Note: If the objects selected in the Primary Object field and the Other Objects field are related in the schema, the relationship between these objects is displayed in the Relationship Between Objects section on the Conditions tab.
    Status
    The status of the rule.

    Possible values:

    • Draft
    • In Review
    • Final
    Note: The rules with Final status are considered for an analysis.
    Priority
    The priority assigned to the rule.
    Expiry Date
    The date up to which the rule is valid.
    Note: When selecting an expiry date, select a date in the future. The rule book expires on the specified date and is not available for analysis after this date.
  4. Specify additional information on the risks associated with the rule in the Risk Description tab.
  5. Specify the reason for the existence of the rule, in the Control Objectives tab.
  6. Specify the documentation for the rule, if any, in the Documentation tab.
  7. Add reference documents from IDM (Infor Document Management) or from a third party for additional information, on the Supporting Documentation tab. Select the details and click Add. The selected documents are displayed at the bottom of the New Rule page. Click the document to review the details.
  8. Specify this information in the Owners tab:
    Owners
    The user assigned the role of an Owner for the rule.

    The Owners can:

    • Modify the conditions in a rule.
    • Add other owners to the rule conditions.
    Users
    The user assigned the role of a User for the rule.

    The Users can review the existing rule conditions and consider the conditions when creating rules.

  9. Click the Compensation Controls and Exclusions section for:
    • Assigning an existing compensating control to the rule, using the Assign option. The assignment expiry date of the selected compensating control is also displayed. Click the expiry date link to select a different expiry date from the calendar or retain as Never Expires.
      Note: You can also create a new compensating control, using the New option. See, Working with compensating controls.
    • Removing a compensating control already assigned to the rule, using the Remove option.
    • Excluding objects from the rule. See, Excluding objects from a rule.
  10. Click the Conditions tab to create rule conditions.

    Rules can be built with just one group or multiple groups. A group is a set of conditions. Each group can have one or more conditions separated by an operator. Two or more groups are separated using the operator AND or OR. During analysis,Infor GRC evaluates all the conditions in the first group sequentially and then the conditions in the second group based on the operator.

    • For Simple rule Add values and operators to create rule conditions. The values displayed are based on the Primary object selected for creating the rule. See Simple rule conditions.
    • For Math rule Add values and operators to create math rule conditions when computed data is required. Math rule can be created using various templates, math functions, math operators, and brackets. See Math rule conditions.
    • For Duplicate rule Add attributes and conditions to identify duplicate records for an object. The values displayed are based on the Primary object selected for creating the rule. See, Duplicate rule conditions.
    Relationship between objects

    This section is displayed only if the objects selected in the Primary Object field and the Other Objects field have a pre-defined relationship in the schema. The relationship is required for accurate analysis results and must be retained.

  11. Click the Reporting Fields tab to select the attributes of the object for which you want to view the violations, if any. Violations for the selected reporting fields can be reviewed on the Violations page.

    If no fields are selected as reporting fields, then default fields are saved as reporting fields based to the primary object selected. Default fields provide high level information for the violated object.

  12. Click Save.