Hi Sridhar
"my issue is not having insufficient access" but do not see the 'master data' tab at all in portal does not make sense.
You need the Master Data Tab and get access that via NWBC with a SAP_GRC* role assigned or your need the portal access built/assigned to obtain it.
my primary question is still the one noted in the subject line, and it is still unanswered - you have been given some answers and most of this comes back to "nobody else to maintain GRC at my company now". It is obvious you have a knowledge/training issue and I recommend you talk to your supervisors and ask from training
In the mean time you need to:
- find out what the access the previous GRC person had as this may have granted the Master Data tab via the portal
- Alternatively, request the the SAP nwbc acecss in GRC so you can login to GRC component and launch NWBC
That solves the tab
The next bit is setting up the Mitigation Owner/Monitor
- they need a SU01 GRC account and user/role sync completed
- In NWBC or portal, you need to set them up as an Access Control Owner and give them the Mitigation Owner or Monitor role (tick box)
- You need to go to the Master Data Tab and maintain the Standard Hierarchy View Org Strucutre to add the SU01 Account/Access control Owner to the Owner tab.
- Once you complete steps 1-3 you can then add the Owner to the Mitigating Control for the specific org unit the control relates to
Finally, "please specify which child org " - that depends entirely on how you system has been configured and how many org units have been created and what they mean
You might want to see what configuration material and procedures were left (if any) behind by the previous GRC person. And raise to your management that they need to replace that expert or train you up
good luck!
Regards
Colleen