EAM - Best Practices

[#1]

G'Day All,

I would like to draw upon your collective knowledge in regards to the best practices that needs to be adhered to while implementing/using firefighter (EAM). I acknowledge that there is already an abundance of information as to the technical side of the things here on SCN, so to be specific I am more interested in:

1. Identification/Justification of usage of firefighting (what truly qualifies considering this is a form of Mitigation Control)
2. Firefighter Log Report Review
   • Workflow 
   • Audit trails
   • Archiving  
3. Key Tables related to usage, tracking and audit purposes. For example:
   • GRACFFLOG
   • GRACFFCTRL
   • GRACFFREPMAPP
   • GRACREQ
   • GRACREQOWNER
   • GRFNMWRTAPPR
4. Anything you deem necessary or encountered that is worth sharing

Regards,

Leo..

[alessandr0 · Accepted solution]

Hi Leo,

first of all.. welcome back 🙂

Regarding your post... did you check my process documents for firefighters? Maybe they are helpful for an overview.

http://scn.sap.com/community/grc/blog/2014/03/03/firefighter-id-lifecycle

http://scn.sap.com/community/grc/blog/2014/03/07/firefighter-id-user-assignment-lifecycle

Also check the documents regarding mitigating controls and internal controls:

http://scn.sap.com/docs/DOC-53355

http://scn.sap.com/docs/DOC-56548

Looking forward to your feedback.

Cheers,

Ale

[leos · Accepted solution]

Thanks Ale. I know its been quite a while 🙂

I did go through all of the documentation under EAM in your useful documents section and I read these last year but I shall go through them again.

Just quickly though, how does the third option (Log display) of Notification method for the Controller work? I know the other two (Email & Workflow) but how do Controller's get/check the logs using this option and can they approve/add comments etc?

Cheers

Leo..

[alessandr0 · Accepted solution]

Dear Leo,

log display means that no automated notification is sent to the controller. The log can be seen in the reports in NWBC.

Hope this answers your question in short

Cheers,

Ale

[leos · Accepted solution]

Thanks Ale, appreciate it.

Cheers

Leo..