Knowledge base / Analysis and remediation
Dashboard measures
The dashboard counts different things — risk definitions, findings, users and decisions. Each number has one definition, shown when you hover over it or tab to it.
| Measure | What it counts |
|---|---|
| Users analysed | Users with at least one valid role assignment on the as-of date. Locked and expired users are left out when USR02 is loaded. |
| Risks in ruleset | Distinct risk definitions in the loaded ruleset, such as R001 "Maintain vendor master & run payments". Rules switched off as not applicable are shown separately. |
| Risks present | Distinct risks held by at least one user without a valid control. Includes directly assigned critical profiles such as SAP_ALL. |
| Findings | One finding = one user holding one risk. Split into open (no valid mitigating control) and mitigated. |
| Affected users | Distinct users with at least one open finding. |
| Decisions | Findings with a recorded decision: a remediation status other than Not started, a false positive, or a valid mitigating control. |
| Roles | Single roles in the authorization data. Composite roles are counted through their single roles. |
How they relate
In the sample company: 11 risks are defined; 10 of them are held by someone; together they produce 19 findings — 17 open and 2 mitigated — across 15 affected users. The severity cards, the donut and the business-process chart all count the 17 open findings, so their totals match. The workflow bar's "2 of 19 findings decided" uses the same 19 findings.
Trend and snapshot
Each as-of date you analyse keeps one snapshot. With a single snapshot the card shows the breakdown by level for that date; the trend line appears once a second snapshot exists — load a newer extract, or analyse another as-of date.
Audit readiness
The dashboard lists every readiness check that is still open, with a button that takes you straight to the field or screen that resolves it — for example the ruleset approver on the Audit screen, or the high and critical findings that still need an owner.
Still stuck? Ask us — we answer within one working day.