Skip to main content

Get help for ARIS Risk and Compliance

Transfer Risk and Compliance data from ARIS

You can transfer GRC-relevant master data objects (example: risks or survey schedulers) along with their assigned objects (example: hierarchies or roles) from ARIS to ARIS Risk and Compliance. Note that the transfer cannot be undone. Therefore, simulate the transfer of Risk and Compliance data previously to check the changes that would result from the transfer.

Prerequisite

  • You have the Risk and Compliance administrator or Risk and Compliance data transfer manager function privilege and the Risk and Compliance (Operate) license privileges.

  • You have the required privileges in ARIS, for example, ARIS Connect Designer.

  • The ARIS database used for this transfer must be the one specified for the environment in ARIS Administration (Configuration > Risk and Compliance > DATA MANAGEMENT > Environments).

  • To transfer roles, the Master data management settings for roles (ARIS Risk and Compliance Administration Administration > System > Basic settings) must not be disabled.

  • Objects and models are transferred to ARIS Risk and Compliance only if the Transfer to ARIS Risk and Compliance attribute (AT_AAM_EXPORT_RELEVANT) is set to true. For detailed information on modeling guidelines, refer to the Modeling Conventions.

  • The data of an ARIS database can be transferred to multiple ARIS Risk and Compliance environments, but an ARIS Risk and Compliance environment can receive data from only one ARIS database.

  • The Transfer Risk and Compliance data report is enabled for ARIS (ARIS Architect > ARIS > ARIS Architect Administration Administration > Evaluations Evaluations > Reports > ARIS Risk and Compliance > Transfer Risk and Compliance data > Properties > General > Availability > Available only in ARIS Architect must be disabled) and the roles whose members have access to the script are specified (> Restrict access). By default, this report is disabled because you need extensive knowledge to run this report. For detailed information on how to manage scripts, refer to the ARIS Architect online help (ARIS Configuration and Administration > Manage scripts).

  • By default, the transfer can be started in ARIS on a database, a group, and on fact sheets of GRC objects such as risks and survey schedulers. You can specify the database items for which the script can be started (ARIS Architect > ARIS > ARIS Architect Administration Administration > Evaluations Evaluations > Reports > ARIS Risk and Compliance > Transfer Risk and Compliance data > Context).

  • Migrate the Risk and Compliance roles before you transfer Risk and Compliance data that follow the former modeling convention (up to version 10.0.17).

  • The roles used in the modeling must already exist in ARIS Risk and Compliance. They must either be created in ARIS Administration (Configuration > Risk and Compliance > DATA MANAGEMENT > Roles) or transferred from ARIS to ARIS Risk and Compliance using Get from ARIS Repository. For detailed information, refer to Manage roles in the online help of ARIS.

Procedure. Procedure

  1. Start ARIS.

  2. Click Application launcher Application launcher > Published content ARIS Published content.

  3. To start the report on a fact sheet, click Application launcher Application launcher > Published content ARIS Published content and open the overview fact sheet of the item from which you want to start the transfer. To start the report on a database or a group, click Application launcher Application launcher > Models & Objects ARIS Models & Objects and click the database or group from which you want to start the transfer.

  4. Click Reports Reports. The Reports bar opens.

  5. Click the drop-down list box to display the list of available reports.

  6. Click Transfer Risk and Compliance data.

  7. Click Start.

  8. Select the environment to which the data is to be transferred. If no environment is displayed or if you want to use another environment than the one displayed, you must specify the database in the respective environment in ARIS Administration (Configuration > Risk and Compliance > DATA MANAGEMENT > Environments).

  9. Activate Deactivate objects deleted in the ARIS database in the target environment to deactivate objects which were deleted in the ARIS database in the corresponding environment in ARIS Risk and Compliance. This option is only available if you have started the export on a database.

  10. To verify whether the changes that would occur due to the transfer are correct and executed without errors, first run a simulation before transferring the data. To do so, enable Simulate transfer and Click OK. Otherwise, skip this step.

    The simulation is performed. Under Report results in the report panel, click Download and open the log file. If errors occurred, resolve them. Then repeat the previous steps.

  11. If required, enable Generate due workflow tasks immediately. Otherwise, scheduled tasks are triggered at the time specified. This option is displayed only if you started the report on an object or model.

  12. To start the transfer, click OK.

The master data objects are transferred to ARIS Risk and Compliance. If role maintenance is only allowed in ARIS Risk and Compliance (ARIS Risk and Compliance Administration Administration > System > Basic settings > Master data management > Roles), user roles are not transferred. To check the result, open the log file.

To open ARIS Risk and Compliance from ARIS, click Application launcher Application launcher > Switch to ARIS Risk and Compliance Risk and Compliance.