What is 'risk score policy' in SAP GRC-IAG - SAP Cloud Identity Access Governance?

risk score policy - Overview

• Component: GRC-IAG

• Component Name: SAP Cloud Identity Access Governance

• Description: A risk score is a quantifiable number based on the user's access, usage, risks, and mitigation. The default formula is: Total Roles + Used Roles + Risks - Mitigated Risks = Risk Score of an individual. In , you can assign a weighting factor to each parameter to create a risk score policy.

risk score policy - Details

• 
  Key Concepts: 
  Risk Score Policy is a feature of the GRC-IAG SAP Cloud Identity Access Governance component. It is used to assess the risk associated with user access to applications and data. The policy assigns a risk score to each user based on their access privileges, and then uses this score to determine whether or not the user should be granted access. 
  
  How to use it: 
  The Risk Score Policy can be configured to assign different levels of risk scores to different users based on their access privileges. For example, a user with administrative privileges may be assigned a higher risk score than a user with only read-only access. The policy can also be configured to take into account other factors such as the user's location, the type of application they are accessing, and the type of data they are accessing. Once the risk score has been assigned, it can be used to determine whether or not the user should be granted access. 
  
  Tips & Tricks: 
  When configuring the Risk Score Policy, it is important to consider all of the factors that could affect the risk score. This includes not only the user's access privileges, but also their location, the type of application they are accessing, and the type of data they are accessing. It is also important to ensure that the policy is regularly