topic Re: SOD in Application Development and Automation Discussions

SOD

Former Member — Wed, 13 Feb 2008 07:54:45 GMT

Hi Experts,

Can someone giveme information regarding SOD process, who prepares the SOD matrix, and how to know the conflicts according to SOD?

Does a Security Admin need a functional knowledge for this SOD process? and

Does a Security Admin need knowledge of HR module to set up HR authorisations?What are the important things Security Admin need to know to set up HR authorisations?

Regards,

Sandhya

Re: SOD

Former Member — Wed, 13 Feb 2008 08:01:04 GMT

Hi,

Scroll down the page and you will see a topic called SAP SOX - there is plenty of info there.

If you use the search for SOD or segregation of duties then you will get loads of info.

For HR, a security admin should have an understanding of basic HR concepts and how the restrictions work to secure those (e.g. infosets, org structure (if doing structural auths)). If you don't have this knowledge then it will make it harder but not impossible. Make sure you work closely with your HR team, they usually know more security (as it's rather important in HR....) than most functional consultants.

Re: SOD

Former Member — Wed, 13 Feb 2008 10:31:07 GMT

Hi,

Functional consultants will prepare the SOD matrix. and Org. values.

Re: SOD

Former Member — Wed, 13 Feb 2008 11:36:53 GMT

> Hi,

> Functional consultants will prepare the SOD matrix. and Org. values.

If only it was that simple. Functional consultants are one group you may want to talk to, though risk management/internal controls, internal audit and busines process owners are likely to know more about the high level risks applicable to that business than functional teams.