Mitigating violations

Select the violation to be mitigated. You may select more than one violation for this action.

Click the Mitigate icon. A dialog box is displayed.

From the Mitigate Type drop-down list, select one of the following reasons for mitigating the violation:

Exclude User
Mitigate the violation by excluding the object generating violations. The Apply Compensating Control and Exclusion Expiry fields will be displayed. Associate a compensating control with the exclusion. Compensating controls may be mandatory or optional, depending on the settings on the Mitigation panel of the Configuration page.

To associate a compensating control with the exclusion, type the compensating control name in the autosuggest text box or browse and select from already existing compensating controls. Alternatively, click New to create a new compensating control to associate with this violation. When you perform this action, the compensating control is automatically associated with this violated rule.

Note: The option to create a new compensating control is available only if the signed-in user is assigned a role that has permissions to create new compensating controls. These permissions are assigned while creating the role.

Note: Exclusions or compensating controls are added to the base rule. If the rule is viewed by clicking the rule link, you will see the snapshot of the rule which will not contain the exclusion.

In the Exclusion Expiry field, set the expiry date for the exclusion. Click the Calendar icon to select a date from the calendar or leave as Never Expires. The expiry date must either be the current date or a future date.
Confirm corrective changes in system
Select this option to mitigate the violation by making corrective changes in the ERP system manually. When you select this option, the status of the violation changes to 'Pending Close'. If required, associate a compensating control to mitigate the violation. Here, compensating controls are optional, even if the check box Make Compensating Controls mandatory for mitigation is selected on the Mitigation panel of the Configuration page.

Associate a compensating control with the exclusion as follows: Type the compensating control name in the autosuggest text box or browse and select from already existing compensating controls. Alternatively, click New to create a new compensating control to associate with this violation. When you associate a new compensating control to mitigate the violation, the compensating control is automatically associated with this rule.

Note: The option to create a new compensating control is available only if the signed-in user is assigned a role that has permissions to create new compensating controls. These permissions are assigned while creating the role.
Create a request to change a user's role/responsibility
Mitigate the violation by creating a request. The request type will vary depending on the ERP application you are working with. When this option is selected, the fields Apply Compensating Control and Exclusion Expiry are not displayed.

Select Colleagues to notify about the violation status. Select the check box ALL to select all Ming.le ^TM colleagues or click the Browse icon to select specific colleagues. Alternatively, you can use the autosuggest text box to select colleagues. All the selected colleagues will be notified about the violation status on their Ming.le^TM Feed page.

Select Groups to notify about the violation status. Select the check box ALL to select all Ming.le^TM groups or click the Browse icon to select specific groups. Alternatively, you can use the autosuggest text box to select groups. All the selected groups will be notified about the violation status on their Ming.le^TM Feed page.

In the Comments field, provide a reason for mitigating the violation. This is an important step for capturing the full details of the remediation efforts. Provide as much information as you can about the action you have taken.

Click Mitigate. The status of the violation is changed and a long running Post Mitigate Violations task is created on the Task page.

Note: Violations can also be mitigated through violation reports. For details, refer to Reports List. Closed violations or violations already assigned to other reviewers cannot be mitigated .However comments can be added to such violations. Mitigations will be retained if changes are made to a rule description. Mitigations will be discarded only if rule conditions are modified.