Page tree

Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

The Security Dashboard features the ability to Exclude objects from a future snapshot - this can be useful when the object is violating an AIP Quality Rule, but is irrelevant:

Info

Note that:

  • Using when an object is excluded, it will be excluded in the next snapshot and in all future snapshots.
  • using the Exclude feature will affect grades when a new snapshot is generated or when a snapshot is consolidated. This is because the violations that are excluded will not be included in the new results.
  • Exclusions are available when viewing data from a previous snapshot, however, the ability to edit Exclusions is only available from the most recent snapshot.

...

Info

Notes:

  • Roles can be assigned at user level (when using Default Authentication mode) or via user or group (when using Standard LDAP/SAML authentication). Please see User roles for more information.
  • You can view Exclusions in read-only mode if your user login has not been assigned the required role.

...

Now click the Add button and select the Schedule Exclusion of the violations option:

Image Modified

Now enter a comment (mandatory) to annotate the violations (this comment will appear in the Exclusion list). Click Exclude to add the violations to the Exclusion list:

...

The violations will then be added to the Exclusion list under the Scheduled drop down:

Info

Note that you can add multiple violations to the Exclusion list in one go:

If there are many violations, a Pagination (table footer) will be displayed (this is to improve the performance of the display). At the bottom of the violations list, there are improved options for pagination of items:

Image Removed

The SHOWING option allows you to view violations in groups of 20, 100 or all violations. You can choose to display more using the various options (+10, +100 etc.).

Image Removed
  • You can move violations to the Scheduled Exclusion list from the Action Plan using the Schedule exclusions for related violations option:

Image Added

Image Added

Image Added

Anchor
remove
remove
Removing violations (objects) from the Exclusion list

...

  • Depending on which list of exclusions you are working in, the following will then occur:
    • Active Exclusions > The selected violations will be greyed out in the Active Exclusions list and will also appear in the Scheduled Exclusions as scheduled to remove - the violation will be taken into account once again in the next  full snapshot or consolidation action and will then move out of the Exclusion list entirely.
    • Scheduled Exclusions > The selected violations will be removed from the Scheduled Exclusions list and will be available for re-selection in the future.

Via the Risk Investigation, Application Investigation, Transaction Investigation and Advanced Search views

In ≥ 2.10 you can remove violations from the Exclusion list (only from the Scheduled Exclusion list) from the following locations:

To do so, find the violations or violations you want to remove in any of the views listed above and then select the violation (or use the multi checkbox to select all violations) you want to remove:

Image Added

Then click the Manage button and select the Remove from Scheduled list option. All selected violations will be removed from the Scheduled Exclusions list and will be available for re-selection in the future:

Image Added

Updating comments for violations (objects) that are already present in the Exclusion list

...