When you view Risk Ratings in SAS Enterprise GRC, you can search the Recommendations table and the Selected Recommendation table for entries that meet specific criteria for one or more columns. You can also sort the table entries by column value. However, the search and sort functions might not return the correct results.

Here are some examples of searches and sorts that might not return the correct results:

• When you search the Selected Recommendation table in the Selected Recommendation column, the search dialog box might contain invalid error information in the value field.
• When you search the Recommendations or Selected Recommendation table for a valid value in the Mitigating Actions column, the search might incorrectly return no results.
• When you search the Recommendations or Selected Recommendation table for a numeric value in the Risk Rating Post Mitigation column, the search might incorrectly return no results.
• When you sort the Recommendations or Selected Recommendation table by the Risk Rating Post Mitigation column, the recommendations are incorrectly sorted alphabetically by the name of the risk rating. The recommendations should be sorted numerically by the rating value.

There is no workaround for the problem.

Click the Hot Fix tab in this note to access the hot fix for this issue.

Operating System and Release Information

A fix for this issue for SAS Enterprise GRC 4.3 is available at: