Mitigation is the process by which you recognize a risk but allow it, choosing instead to actively mitigate it with checks and balances procedures. In EmpowerID you achieve this through the use of mitigating controls. Mitigating controls are objects that you define at a global level and associate with global risks. Once associated with global risks they become available for mitigating local risks and can be used for mitigating specific violations to those risks.
How to add mitigating controls to risks
On the navbar, expand Compliance and click Risk Management.
On the Risk Management page, select the Global Risks tab and then search for the global risk to which you want to add mitigating controls.
Click the Name link for the global risk.
On the Global Risk Details page, select the Mappings tab and then expand the Mitigating Controls accordion.
Search for and select the mitigating control that you want to add to the risk.
Repeat step 5 for each mitigating control you want to add to the risk.