Version 5.2.13 introduces several enhancements aimed at improving flexibility, automation, and user experience across the ComplianceNow suite. This release includes updates to the risk approval workflow, new capabilities for control documentation, and support for SAP GUI 8, along with general performance improvements.
Updated Risk Approval Process Enabling Partial Role Provisioning
In this release, the role provisioning logic has been enhanced to support sequential processing in relation to risk approvals.
Previously, if a request included one or more roles that triggered a risk, the full set of requested roles would remain pending until all risks were either approved or rejected. In case of rejection, all roles assigned would be rejected, and the process would start over.
With the new update, role assignments are now processed individually based on risk involvement. Roles that are not associated with any risk are provisioned immediately, while only the roles involved in risk scenarios are held for approval.
This change introduces more flexibility in the approval process, allowing for faster partial provisioning without compromising compliance standards. Risk decisions are handled per individual risk, which also means that parts of a request can be accepted or rejected independently, without requiring the entire approval process to restart.
Old assignment process
New assignment process in 5.2.13
Key Benefits
- Faster provision of roles not involved in risk, minimizing delays in daily operations
- Reduced administrative effort by avoiding full request reprocessing when risks are involved
- Clearer visibility into which roles are pending due to risk, simplifying follow-up
Automatic control documentation in CN Internal Control
This release introduces support for automatic control documentation using custom SQL queries. Control owners can now define a SQL statement directly within a control, which will execute against the relevant system and generate a report at the time the control is issued. The resulting output is automatically attached to the control as documentation.
In addition to this new functionality, the standard control template library has been extended to include predefined SQL-based controls. This is at the time of writing limited, but the templates will continue to expand over time. Clients also have the flexibility to define and maintain their own SQL queries, allowing for tailored control logic and reporting based on specific organizational or system needs.
Customizable Workflow Emails
Access Control workflow emails can now be customized to match your organization’s branding. You can add your company logo and apply custom colours, making communication more consistent and recognizable to end users.
SAP GUI 8 Compatibility
The solution is now fully compatible with SAP GUI 8, ensuring continued support for the latest SAP interface standards.
Performance and Stability Improvements
This release also includes several general improvements related to system performance, data handling, and bug fixes. For full technical details, please view release notes below.
Please contact our support team at support@compliancenow.eu if you wish to update to version 5.2.13 of the CN Suite.
Important notice (Only if currently running SP12)
These are important fixes to the data transfer that have been corrected in SP13. But will not be corrected in SP12. It is highly recommended to upgrade to SP13 if using either Access Control (AC) or Usage Monitor (UM).
- ComplianceNow Ticket APM-3840: The data transfer program transfers user/role relations. The first time the data transfer program is executed the correct user/role relations are recorded in the database. On subsequent runs, the relations might contain incorrect relations.
- ComplianceNow Ticket APM-3851: The transfer of Composite roles and their included child roles can contain errors if the amount of composite/child role assignments are distributed across 2 chunks if there are more than 2000 assignments during the transfer. A composite role divided like this will be incomplete in the CN database.
- ComplianceNow Ticket APM-3855: There is a small issue with the data transfer program (URT collector) which does not transfer role assignments correctly if a “valid from” date on the role assignment is on the same date as the data transfer is executed.
Follow us on LinkedIn and get instant access to our latest articles and posts on SAP and compliance.
