What is risk score policy in SAP GRC-IAG - SAP Cloud Identity Access Governance?

SAP Term: risk score policy

• Component: GRC-IAG

• Component Name: SAP Cloud Identity Access Governance

• Description: A risk score is a quantifiable number based on the user's access, usage, risks, and mitigation. The default formula is: Total Roles + Used Roles + Risks - Mitigated Risks = Risk Score of an individual. In , you can assign a weighting factor to each parameter to create a risk score policy.

Smart SAP Assistant

• Key Concepts: 
  Risk Score Policy is a feature of the GRC-IAG SAP Cloud Identity Access Governance component. It is used to assess the risk associated with user access to applications and data. The policy assigns a risk score to each user based on their access privileges, and then uses this score to determine whether or not the user should be granted access. 
  
  How to use it: 
  The Risk Score Policy can be configured to assign different levels of risk scores to different users based on their access privileges. For example, a user with administrative privileges may be assigned a higher risk score than a user with only read-only access. The policy can also be configured to take into account other factors such as the user's location, the type of application they are accessing, and the type of data they are accessing. Once the risk score has been assigned, it can be used to determine whether or not the user should be granted access. 
  
  Tips & Tricks: 
  When configuring the Risk Score Policy, it is important to consider all of the factors that could affect the risk score. This includes not only the user's access privileges, but also their location, the type of application they are accessing, and the type of data they are accessing. It is also important to ensure that the policy is regularly updated in order to keep up with changes in user access privileges and other factors that could affect the risk score. 
  
  Related Information: 
  For more information about Risk Score Policy and how it can be used in GRC-IAG SAP Cloud Identity Access Governance, please refer to SAP's official documentation: https://help.sap.com/viewer/product/SAP_CLOUD_IDENTITY_ACCESS_GOVERNANCE/Cloud/en-US