Actions from this page

These actions can be taken from the Document Exclusions page:
  • Add compensating controls to rules

    Compensating controls are used to mitigate the risk caused by the excluding objects. Before compensating controls can be used for mitigation, they must be created in Infor Risk & Compliance. They may already be assigned to the concerned rule or you need to select the required compensating control from a list of existing compensating controls.

    Note: If an object is excluded using parameters, compensating controls and documentation can be attached only if the parameters have values assigned.

    Assign a compensating control as follows

    1. Select the check box next to the required object.
    2. Click the Add icon. The Manage Compensating Controls pop-up window displays a list of the compensating controls assigned to the selected rule and the expiry date for the assignments.
    3. Click the date link to select a different date from the calendar or leave as Never Expires. By default, the assignment expiry date is set to Never Expires. Select the check box Apply to All to set the same expiry date for all the compensating controls assigned to the selected rule.
    4. Select the desired compensating control and click Done.
    If compensating controls are not assigned to a rule:
    1. In the Manage Compensating Controls pop-up window, click the Assign icon.
    2. The Compensating Controls pop-up window displays a list of existing compensation controls.
    3. Select the required compensating control and click OK to assign the control to the rule.
  • Set the validity period for the exclusions defined

    Exclusions have an expiry date, which specifies how long that exclusion is valid for. For example, suppose you have a user who is a consultant working with your organization for 3 months. You may want to exclude this user for the 3 months during which time no violations will be recorded for this user. At the end of the period, the exclusion will expire and the user will show up as a violation.

    To set an expiry date for the exclusion:
    1. Click the date link in the Valid Through column.
    2. Specify a date in the text box or click the Calendar icon to select a date from the calendar. Any date (past, present or future) can be set as an expiry date.
    3. Select the Apply to All check box to set the same date across all exclusions in the selected rule and click OK.

    A notification is automatically sent to the rule creator and the rule owner who has excluded the object from the given rule.

    Note: When an exclusion expires, the system automatically sends a notification with this information to the rule owner and the rule creator. The notification is sent 7 days in advance to the user concerned and also every day till the event expires. These settings can be configured using the SetNotifications.xml file.

    For details, see the document Infor Risk & Compliance Platform - Configuration settings.

  • Delete Exclusion

    To delete exclusions, select the exclusion to be deleted and click the Delete icon.