2013 Jun 14 4:43 PM
Hello Experts,
I am an Information Security Consultant with 9 years of experience performing audits for SOx IT general controls, pci dss, 27001 compliance, change management, Segregation of duties, risk management, access control reviews etc.
I am inclined towards SAP GRC as automation is the future of GRC consulting career.
I plan to get some training for the module (I am new to SAP) but not sure whether this is a smart move taking account of my experience.
Please let know, whether my present accumulated experience will help with SAP GRC or is it a waste.
Also, are there any documents which help me understand how my above knowledge can be put in use with SAP GRC consulting.
Also, what different career paths available with SAP GRC with my profile.
I am not good at writing scripts or code, so will this hinder my aspirations in any way.
Thanks,
Karan
2013 Jun 21 4:27 PM
Hi Karunanidhi,
Having experience in Audits, SOX,change management, access control etc (based on what you have mentioned about your work experience) you can go for SAP GRC. You don't need to write any script or write programs in SAP GRC. If you can find anyone who is having experience in SAP GRC then it will help you to learn but its not that easy to find someone who is ready to teach. You can look for any training company or sap partner who gives training on GRC. I know SAP Labs gives trainings on many modules including GRC, follow this link (http://www.sap.com/india/training-and-education/index.epx) and you can find the schedule for GRC Training.
I hope I was able to give you some useful information, if you liked it then please rate it.
Thank you,
Nagarajan Viswanathan
2013 Jul 03 4:27 PM
Dear Nagarajan,
Thanks for the guidance. It surely helped me. Will surely plan to get trained.
Meantime, please guide me a book (for SAP GRC with all three modules RM, PC etc) for self study too, before I plan for training.
Await for your reply.
Thanks,
Karan
2013 Jul 07 12:31 PM
Hi Karunanidhi,
Please follow the below specified URLs and read the document named "solution.pdf".
http://www54.sap.com/pc/analytics/governance-risk-compliance.html
http://scn.sap.com/docs/DOC-8879
The SAP community for GRC is very good, you will find many useful articles/blogs and good posts. Try to add people in your network who are in security and GRC. The most important thing is to read and understand the concept and try to make a picture as to how all these things work.
Please rate the response according to your satisfaction level.
Thank you,
Nagarajan Viswanathan
2013 Jul 05 9:27 AM
Hi Karunanidhi,
If you have any further questions then feel free to ask. If you feel you got the correct response and it helped you then please close this post and rate it accordingly.
Thank you,
Nagarajan Viswanathan