topic Re: Query about VIRSA in Application Development and Automation Discussions

Query about VIRSA

Former Member — Tue, 04 Sep 2007 09:48:46 GMT

VIRSA is SAP incorporated tool for Governance Risk and Compliance.

Are there any other tools/software available for SOD, compliance, etc?

Maybe 3rd party.

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 10:04:02 GMT

Yes.

There is another tool - Approva 's Bizrights.

Approva‘s BizRights CCM Platform provides a governance, risk & compliance (GRC) platform that lowers your total cost of ownership by providing a single, unified architecture that integrates with your business applications and enables you to automate the way you monitor your controls.

for more details http://www.approva.net/products/platform.

thanks,

Praveen.

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 12:38:22 GMT

Check out Securinfo as well.

http://www.securinfo.com/

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 15:03:22 GMT

Another couple of vendors are:

CSI: http://www.csi4grc.com/

Foxt: http://www.foxt.com/

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 21:02:13 GMT

My recommendation, if you go for 3rd party, would be to take a thorough look at the integration used before you spend 1 cent. Do that a few times and you are cured for a while.

Some "tools", once installed, are also a sustainability and security hazard in themselves...

Thats my 2 cents.

Julius

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 21:10:46 GMT

PS: Search this forum, SAP documentation and several OSS notes on how to use report RSUSR008_009_NEW. It requires a bit of wizardry on the outside as well, but has worked okay for my simple purposes and is included in the standard system.

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 21:55:21 GMT

RSUSR008_009_NEW is vastly under rated as long as you have the knowledge of how to set it up.

Re: Query about VIRSA

Former Member — Tue, 04 Sep 2007 22:46:15 GMT

Hi Alex,

Well, I try my best!

I am actualy a finance guy, and I have observed MANY reports and reporting possibilities in SAP which are neglected and not developed further because customers use download and extraction and even upload tools to get a "green light".

RSUSR008_009_NEW and its predecesor reports, and SUIM itself, and the AIS as well, etc... would be a better tool for us all if customers actually used it and provided SAp with information (and bugs...) which they corrected in a timely manner and enhanced the user friendliness of it.

I hope that it is not too late for that.

I am also a member (rather inactive though) of the SAP Design Guild and they also seem to place value on this if it is reported.

I for one use the standard reporting possibilities and also report bugs in them from time-to-time if I bump into them.

I am also particularly excited about the new include which promises respect of config and customizing. NO imaginable download or extraction tool can do that.

If you have experience with the report and want to exchange some ideas and tips and tricks, then I will gladly share mine with you.

I am in the "research and voluntary guinee pig" phase of this.

Cheers,

Julius

Re: Query about VIRSA

Former Member — Wed, 05 Sep 2007 07:04:05 GMT

Hi Julius,

I'm ashamed to say that I haven't used it for the last 4 or 5 years solely due to my clients preferring to spend money on other solutions.

The next time I get a chance to use it I will definitely get in touch and we can compare notes.

Regards

Alex

Re: Query about VIRSA

dhorions — Wed, 05 Sep 2007 11:48:21 GMT

We recently chose for Security Weaver, and I must say it's a very good product.

There is room for improvement, but the support is great and they really value and act upon our input.

Re: Query about VIRSA

Former Member — Wed, 10 Oct 2007 18:27:08 GMT

Hello Praveen,

I search the form and I Found your name who has some knelodge of BizRights. Can you please help fix this problem.

Issue is with BizRights, I never heard of that but I have heard about approva. I have just researched about this but I never work on it.

This is the issue,

Ex Post reports not aligned with BizRights reports in terms of number of violations. The cause of this issue is not related to timing. There are still 3 examples of misalignment between ex-post data and bizrights data

The ex post Repoert data might be he reports that has been generated by someone and they are compare with the BizRights reports data, something like that,

Please if you have experience with BizRights assists me on this, please assist me step by step since I never used this tool.

It will be appreciated & <b><removed by moderator></b> <= you cannot reward points.. it is not your thread.

Thanks

Message was edited by: Moderator