topic Re: SAP GRC project proposal in Application Development and Automation Discussions

SAP GRC project proposal

Former Member — Wed, 28 May 2008 08:48:49 GMT

Dear All,

I am trying to do a project proposal for my company and was wondering if any one of you could share your experience in writing such a document. Any examples would be greatly appreciated. Thanks.

Re: SAP GRC project proposal

former_member184114 — Wed, 28 May 2008 11:21:44 GMT

Hi Meng,

In GRC suite, you have different things. Can you tell me which one you are planning to implement?

Like GRC Access Control is one part which has RoleExpert, ComplianceCalibrator, AccessEnforcer and FireFighter

Regards,

Faisal

Re: SAP GRC project proposal

Former Member — Wed, 28 May 2008 15:01:25 GMT

Hi Faisal,

thanks for the question. As a start, it will be Access Control.

Regards

Charles

Re: SAP GRC project proposal

Former Member — Tue, 17 Jun 2008 07:50:14 GMT

Hi Meng,

Please look at your company requirement.which should, be implemented.

e.g if you have users asking tcodes every now and then , then you can give implement firefighter and give them FFID in case of emergencies.

hope this helps

Re: SAP GRC project proposal

Former Member — Tue, 17 Jun 2008 08:11:41 GMT

Thanks for your input. Yes the FireFighter (Superuser Privilege Management) will be one of the submodules of Access Control which will be in scope inview of the effort required to do this activity manually.

Re: SAP GRC project proposal

Former Member — Tue, 24 Jun 2008 21:18:02 GMT

Hi Meng,

I think you need to clarify a few things here. Access Control is the name that SAP has given to the Virsa suite of products that they have rolled into the GRC suite. Regardless, the question is, where does the customer environment stand? Is it already compliant?

If no compliance related analysis has been done on the current environment, and you don't know that the environment is, in fact, SOD free, then implementing Compliance Calibrator first would make sense. Subsequently, Firefighter would come into play, and once the SOD issues have been properly addressed, then Access Enforcer and Role Expert can come into play.

I hope this gives you some ideas.

Thanks,

Santosh Krishnan

Re: SAP GRC project proposal

Former Member — Wed, 25 Jun 2008 05:26:38 GMT

This document [GRC Access Control - Access Risk Management Guide|https://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/80c094de-90aa-2910-02b8-e31a6f5ff0c2] contains helpful advice when starting a segregation-of-duties GRC project.

Re: SAP GRC project proposal

Former Member — Thu, 26 Jun 2008 01:19:49 GMT

Hi Alex,

yes, your link provides very useful information. It helps to give me an idea what to expect during the requirements planning phase meetings. But I think could also be used for implementation as well.

Thanks !

Re: SAP GRC project proposal

Former Member — Wed, 30 Jul 2008 13:15:25 GMT

Alex

I am not able to access the GRC - Risk guide that you had set as a hyperlink.

Can you send this again. It will be beneficial for us.

Thanks

Kee

Re: SAP GRC project proposal

NRG0211 — Mon, 09 Dec 2024 09:07:22 GMT

This link is not accessible can you please share the document or a new link?