Financial Management Blogs by Members
Dive into a treasure trove of SAP financial management wisdom shared by a vibrant community of bloggers. Submit a blog post of your own to share knowledge.
Showing results for 
Search instead for 
Did you mean: 
Active Contributor

Dear all,


This blog will give you an overview about the master data in GRC Process Control


As we know already, the master data is shared between all 3 components (AC, PC and RM) of GRC.


Master data in Process controls like Organizations, Business processes, Sub processes, controls, owners, regulations, policies, entity level controls etc.


HR structures have been used in the technical software execution of the master data in SAP Process Control. All objects are contained in info type 1000 (table HRP1000).The link to the long text fields (for example, the fields under Description) is located in info type 1002 (table HRP1002, field TABNR), and the texts themselves in table HRT1002.


Centralized data is nothing but at corporate level Decentralized data (Local) is nothing but at individual unit level.


We have two types of Master data.

  • Central Master data

  • Local Master data


Central Master Data


Central (or Corporate) master data applies to the entire company


• Organization Hierarchy

• Central Process Hierarchy

• Account Group Hierarchy

• Control Objectives

• Indirect Entity-Level Control Hierarchy

• Regulations and Policies



Created from master data work center





Local Master Data


Local (organization-dependent) master data applies to data within each Organization


• Organization-dependent sub processes

• Organization-dependent controls

• Organization-dependent policies

• Organization-dependent indirect entity-level controls


Created from master data work center





The only difference between central and local objects is the organization object.


When we use the central objects like Sub Processes and controls in organization then these objects will become local objects.


All master data changes can be traced by using Audit log under Reports




Master data can be uploaded using 2 ways and also we enter manually

  1. MDUG(Master data upload generator)

  2. CLM(Content life cycle management)


Both are designed to get large amounts of data quickly into the system


MDUG is only available for PC Master Data during initial implementation and Not available for subsequent loads, which is Included within the PC client


CLM is Available for subsequent loading, Must reside as an instance on a portal, Must have someone administering and Master Data for AC, PC and RM can be loaded with CLM.


Master Data that can be moved using CLM

• Organization

• Regulation

– Regulation Group

– Regulation

– Regulation Requirements

• Control Objective

• Business Process

– Central Process

– Central Sub process

– Central Control

• Indirect Entity-Level Control

– Central IELC Group

– Central IELC

• Risk

– Central Risk Category

– Central Risk Template

• Account Group

• Assessment: Manual Test Plan


Master data can be set up and manage by using two work centers from NWBC

  1. Master Data

  2. Access Management


Create master data objects in the following order:

  1. Organizations

  2. Account Groups and Assertions

  3. Control Objectives and Risks

  4. Central Process Hierarchy: processes, sub processes, and controls


When all objects are created, perform the master data assignments:

  1. Assign corporate and organization roles

  2. Assign sub processes to organizations

  3. Assign roles to local processes.

  4. Policies and indirect entity-level controls may be created at any time and assigned to existing organizations and regulations.


Regulations are assigned to the following objects and inherited by the organizations when assigned to them.


1.Sub processes


3.Indirect Entity-Level Controls


5.Ad-Hoc Issues


Feel free to add anything related to master data,hope it helps.