SOD

[Former Member]

Hi Experts,

Can someone giveme information regarding SOD process, who prepares the SOD matrix, and how to know the conflicts according to SOD?

Does a Security Admin need a functional knowledge for this SOD process? and

Does a Security Admin need knowledge of HR module to set up HR authorisations?What are the important things Security Admin need to know to set up HR authorisations?

Regards,

Sandhya

[Former Member]

Hi Experts,

Can someone giveme information regarding SOD process, who prepares the SOD matrix, and how to know the conflicts according to SOD?

Does a Security Admin need a functional knowledge for this SOD process? and

Does a Security Admin need knowledge of HR module to set up HR authorisations?What are the important things Security Admin need to know to set up HR authorisations?

Regards,

Sandhya

[Former Member]

Hi,

Scroll down the page and you will see a topic called SAP SOX - there is plenty of info there.

If you use the search for SOD or segregation of duties then you will get loads of info.

For HR, a security admin should have an understanding of basic HR concepts and how the restrictions work to secure those (e.g. infosets, org structure (if doing structural auths)). If you don't have this knowledge then it will make it harder but not impossible. Make sure you work closely with your HR team, they usually know more security (as it's rather important in HR....) than most functional consultants.

[Former Member]

Hi,

Functional consultants will prepare the SOD matrix. and Org. values.

[Former Member]

>

> Hi,

>

> Functional consultants will prepare the SOD matrix. and Org. values.

If only it was that simple. Functional consultants are one group you may want to talk to, though risk management/internal controls, internal audit and busines process owners are likely to know more about the high level risks applicable to that business than functional teams.