Page Comparison

When a Separation of Duties policy is compiled, EmpowerID creates a review task for each policy violation it finds based on the rules applied to the policy.

For example,

you can have

an SoD policy with a rule that specifies that a violation

occurs when any one person is assigned to both Management Role "A" and Management Role "B" at the same time

. When the SoD engine runs, it checks to see if any one person belongs to both of those roles. If the engine finds people with both roles, it creates

an SoD review task for each violation (one per person). These tasks can then be reviewed and remediated by anyone assigned

the Enterprise Compliance Officer Management Role as well as anyone assigned to all of the following Access Levels:

• The Reviewer Access Level for the people violating the policy
• The Reviewer Access Level for the Separation of Duties policy
• The Viewer Access Level for

• the Auditor Compliance Dashboard (if you want the person to have access to the dashboard)
• The Viewer Access Level for the Auditor Compliance Open Violations page of the Auditor Compliance Dashboard and/or the Viewer Access Level for the User Compliance Open Violations page of the User Compliance Dashboard

To review Separation of Duties Violations

1. Log in to the EmpowerID Web application as either a person assigned the Enterprise Compliance Officer Management Role or a person with all of the above mentioned Access Levels.

2. In the Navigation Sidebar,

1. expand Compliance and Reports

1. , then For Auditors, and

1. click Policy Violations To Do.

2. From the Open Violations page, search for the SoD Policy with

1. violations to review and

1. click the link for the violation

1. in the SoD Violations grid.
   
   

   Info
   The image below

1. shows what the Navigation Sidebar looks like for someone who has

1. limited access to the Auditor Compliance Dashboard via the Access Level assignments mentioned above. If the person

1. is a member of the Enterprise Compliance Officer Management Role,

1. they see all available pages for the dashboard.

Image Removed

1. 
   Image Added
   
   This directs you to the View page for this violation. This page

1. lets you

1. view

1. details of the violation, including the

1. assignment combinations comprising it

1. . It also displays a set of decisions

1. to submit to remediate the violation.
   

Image Removed

1. 
   Image Added
   
   

2. From the Separation of Duties page, click the Submit Decision link beside the decision that reflects the remediation taken. These decisions include the following:
   • Acknowledged - The SoD Violation has been noted, but no corrective action has been taken by the reviewer.
   • Corrected - The SoD violation has been corrected.
   • Permitted - The SoD violation is unresolved but allowed.
   • Policy Changed - The SoD Policy has been changed to allow any exceptions to a previous version of the policy.
     
     Image Added
     
     
3. Enter comments for the resolution and click OK.
   
   The SoD Policy Violation Details page updates to show the decision.
   

Image Removed

1. 
   Image Added