Risks & functions

Hi There,

Can someone please clarify my doubts..

Q1) How many functions we can add while creating SOD risk . If we add more than 2 functions for example if we add 3 functions then how the rules are going to be generate?.

Q2) What is the impact on business by creating Mitigation controls. when we will create mitigation control?

Q3) what is the process of Remediation risk  and when we will go for remediation?.

Thanks & Regards,

kp