View Advanced Controls and Their Results

Processes, risks, and controls may be related to advanced controls, which are created in the Oracle Fusion Cloud Advanced Controls application.

Each advanced control defines risk, either inherent in the access granted to users of business applications or exhibited by transactions completed on those applications. Each also generates incidents, which are records of access grants or transactions that violate the advanced control's risk definition.

While creating or editing advanced controls, users may relate them to processes, risks, and controls created in Oracle Fusion Cloud Financial Reporting Compliance. If so, the record of each of these objects displays the advanced controls and incidents related to it.

However, you can access only advanced controls and incidents for which you're authorized as a viewer, editor, or owner. Authorizations are granted separately for advanced controls and their incidents. You can modify the records if you're an owner or editor.

Here's how to work with them:

1. Open the search page for an object: Select the Processes tab in the Processes work area, the Risks tab in the Risks work area, or the Controls tab in the Controls work area.

2. Click the name of a process, risk, or control to open a page that displays details about it. Then click its Advanced Controls tab.

3. A grid lists all advanced controls that have been related to the object you selected. The row for each advanced control includes its name and counts of the incidents it's generated.

   • If you're authorized for the advanced control, its name is a link to its record.
   • A Results Count value is the number of pending incidents the advanced control has generated. It applies to both access and transaction controls. The value is a link to a page listing records of the incidents for which you're authorized. (Depending on security, the incident records you see may differ from those seen by others.)
   • A User Count value is the number of users whose role assignments have generated incidents you're authorized to work with. It applies only to access controls (and so is blank for transaction controls). The value links to pages that filter the incidents you're authorized to see by user and, for each user, by role. (Depending on security, the counts and incident records you see may differ from those seen by others.)
   • If you aren't authorized for a related advanced control or its incidents, a row for the control appears in your Advanced Controls tab. However, neither its name nor its incident-count values link to anything.

The record of an incident includes not only a status, but also details relevant to the access grant or transaction that's the focus of the incident. Status indicates, in effect, whether anything need be, or has been, done to resolve the incident.