HiAshish, Colleen
Thank you for your advice , but when I transport SOD Ruleset from IMG , there are 17 tables getting transported ( please check transport request ) , again I should go and generate Ruleset in QA similarly in production , to get you clarity on this , when I compare this scenario with R3( ECC) , it is like when you do one role change in DEV , you will only prefer to transport that specific role , but not all AGR * tables , and generate profiles in QA for all roles .
Coming back to GRC 10 , SOD Ruleset transport is transporting all 17 tables .
Another concern is , whenever I generate rules , with new functions for all risks , what happened to rule id , because we create mitigation controls for a specific rule ids , not for risk id * ,
Keeping that in mind don’t you think change in the function in prod directly will resolve these issues ?
Can someone clarify on this , how we do this in GRC 5.3 ( function or create new risk )