Hi Team,
We have the below use case for mitigation controls.
1. Is it possible to have a blanket/one-for-all mitigating control in IGA that will cover all applications? or do we need to set up mitigating controls per app?
2. If possible, are there any risks or limitations for having one mitigating control for all applications?
The intention is for all applications to have the same mitigation control expiry along with below points:
If we have separate mitigating controls for each app, when an approver goes to apply a mitigating control for one application request, they can see all existing mitigating controls for any other apps also which may be confusing to the approver. But if we have one mitigating control that will cover all apps, then they will only see that one mitigating control which makes it more user friendly and clear.
Kind regards,
Chandu
