Issue with Mitigating Control

[shivmano]

Hi Team - 

I have configured the mitigating control and added recommended association for one of the SOD risks. But the approver is able to see mitigating control for all of the other risks also during request approval.

The recommended association is added just for risk P021. But as you can see, it is also showing for all the other risks P002 and P004 in the request approval page. Please advise 

[rushikeshvartak]

What are sav role approver have ?

does approver is risk owner

[shivmano]

@rushikeshvartak , Yes approver is risk owner. and has below sav role 

[rushikeshvartak]

Risk owner for all risks ?

[shivmano]

Yes, but does that matter? because I have added mitigating control for just one risk. why would it show for the other risks? 

[rushikeshvartak]

As risk owner is same