Answer / aichik_am

SoX - refer to Sarbanes OXley act in the earlier 2000+-.
Where it impact all US companies either they operated in US
or outside (on other countries). Some people think this act
is significant, after fall down of big companies such as
Enron etc..

SoD - refer to Segregation of Duties. Basically one person
cannot have access to the whole process. The task need to be
segregated so that there is check and balance.

VIRSA - is one of third party tools used to check for SoX
compliance in a company. Other then this, there are also
other product such as APPROVA and SecurInfo. Nowadays VIRSA
have been brougt by SAP, and rebrand it as GRC (Governance,
Risk and Control).

Answer / ranjeet kumar

Segaration of duty, as a security principle, has as its
primary objective the prevention of fraud and errors. This
objective is achieved by disseminating the tasks and
associated privileges for a specific business process among
multiple users. This principle is demonstrated in the
traditional example of separation of duty found in the
requirement of two signatures on a cheque.With the concept
of SoD, business critical duties can be categorized into
four types of functions: authorization, custody, record
keeping, and reconciliation.

Answer / sundar

SOX is nothing but Sarbanes OXley act,is developed by the famous auditors Sarbens and Oxley.They developed this law to control the irregularities in the company.Long ago an American company named Enron cheated the customers and share holders and leads to the crisis in the Nation.Then SOX law came into the picture.
SOD refers to "Segregation Of Duties".SOD designed with the concept of separating any sensitive action among the people.Due to this no one can get the full command over the task, so it helps to minimize the irregularities in the company.
Virsa is a third party tool brought by SAP which is useful in finding the SODs.
/n/virsa/zVRAT is the transaction that helpful in finding the violations in virsa.
/n/virsa/VFAT is the transaction for the assigning or mapping the fire fighter id to the user.

under description ; in creating a role what should be written over there ....what does ur company follows ??

10 Answers   IBM,

---

what is the different b/w su10 and su12

0 Answers  

---

What are pfud t-codes used for?

0 Answers  

---

How can you find all t-codes which are locked in the system ?

5 Answers   Wipro,

---

When validity of role is over its profile get deleted from master record but corresponding role remains as it is, Why ? Can we delete it automatically ?

2 Answers   Patni,

---

what is authorization object and authorization object class?

0 Answers  

---

How can you get the user list in sap?

1 Answers  

---

How to control user only can schedule immediate background job but cannot schedule period background job?

2 Answers   Sony,

---

Hi All, We have few users with SAP_ALL profile from 90 days, now i want check what are the transactions they are used till now and i didn’t activate any audit filters in SM19. In this case How can we find?

4 Answers  

---

Give an example of SOD with object level control & also decide the Risk implication from the Technical standpoint.

0 Answers  

---

How to create users?

0 Answers  

---

what is centralized n decentralized

3 Answers   IBM,

---