Answer / gopi

Post Sarbanes Oxley, focus for corporations is more on compliance and security. Sarbanes Oxley has had a major impact on the organizations using SAP R/3 as their ERP. Some of the changes seen in the corporate landsacpe include identifying and documenting processes, implementing controls and safeguards, documenting user access approvals etc. In short, there has been a cultural shift in organizations post Sarbanes Oxley. Below, I have listed 7 major pointers which can help organizations towards better SAP security in the Sarbanes Oxley Era.

1. Provide users access on a need to know and need to do basis.
2. Adequately secure programs, transactions and tables.
3. All user accesses to SAP R/3 are properly authorized and approved.
4. Segregation of duties is maintained for all sensitive business transactions
5. All controls and business processes are documented.
6. Anti-fraud preventive controls are in place to prevent & detect fraud before an audit.
7. User profiles and roles in SAP are secured and designed to meet business requirements.

Answer / praveen

Sarbanes Oxley, focus for corporations is more on compliance and security. Sarbanes Oxley has had a major impact on the organizations using SAP R/3 as their ERP. Some of the changes seen in the corporate landsacpe include identifying and documenting processes, implementing controls and safeguards, documenting user access approvals etc. In short, there has been a cultural shift in organizations post Sarbanes Oxley. Below, I have listed 7 major pointers which can help organizations towards better SAP security in the Sarbanes Oxley Era.

how to delete a single role,the single role is existing with 10 users

4 Answers  

---

What is the main difference between single role and a derived role?

1 Answers  

---

what is the difference between user buffer and user contex?

3 Answers  

---

why we are assigining only 312 profiles to the user

1 Answers   CTC, SAP Labs,

---

hou can i assign a same role to 200 users ?

4 Answers   IBM,

---

---

how v Check SOD conflicts through VRAT

2 Answers   IBM,

---

What is the User Administration and Role Assignment in CUA.

2 Answers   IBM,

---

What is the difference between c (check) and u (unmaintained)?

0 Answers  

---

Give an example of SOD with object level control & also decide the Risk implication from the Technical standpoint.

0 Answers  

---

In 4.7 EE, we have an option as User -> Settings -> Automatic Comparison at Save. Is it right if i say that this option checked will automatically prompt for User cpompare when we simply save the data after entering the users to the role? But whether the option is checked or not i did not get any prompt for User compare on saving the data after entering Users info in the role. My another doubt is whats the difference between User and Complete Compare options. If i dont do complete Compare, wiill that effect? Is it right if i say that User compare assigns the users to the role and Complete Compare updates the user master recoirds , i.e., User master record comparison is current.

3 Answers  

---

how to create new authorization object?

8 Answers   Accenture,

---

How to know the total no. of users in particular plant in sap?

1 Answers  

---