Answer / krihna prasad

migration is Detective control it prefers only when less employes in ur company and it will secure as monitoring by Like cam

Remidation is Preventive control and it prefer when ever two conflicts activites are combined in a role,Re design the role and assign to different users.

example: su01 + pfcg in one role is Risk

Redesign role like as su01 in 1 one role and pfcg in 1 one role and assign to different users to avoid frod from the users

Answer / ashwini

Mitigation is detective , remeditaion is preventive

what is the rule set in GRC?

5 Answers   Bosch, IBM,

---

can you please send me SAP Security upgrade documents and guide for CRM 5 and CRM 7 and what are the differeces between crm 5 AND crm 7 according to sap security point of view.

0 Answers   Pepsi,

---

how v Check SOD conflicts through VRAT

2 Answers   IBM,

---

What is stad?

0 Answers  

---

Some User has made changes to Tables in SAP. How to identify that user?

1 Answers   Cap Gemini,

---

what is the landscape of GRC

3 Answers   GE,

---

If user says he don’t have authorization then how to proceed?

3 Answers   IBM,

---

1) Explain different type of Users? Explain specifically Service User? 2) Difference between System and Communication User?Explain in Context of Profile Parameter? 3) There are 5 systems say BI, SOLMAN, CRM, PI, SRM etc etc. Which system will act as a satellite system in CUA and Why? HOw CUa system works? 4) State different types of Transactions & Tables in Strutural Authorization Profile in HR Security? 5) What is L0 , L1 , L2 , L3 , L4 code called in HR Security? 6) What fields are required to create Strutural Authorization Profile in HR Security? State significance of Evaluation Path? 7) What is Structural Authorization Profile in HR Security? When required Role has already been assigned to User then why Structural Authorization Profile is required by user? 8) How are structural Authorization Profile are created? 9) Important Authorization Object in HR Security? 10) Fields in P_ORGIN A.O? 11) Important infotypes and What is PA? 12) How access is provided for tables to user? Significance of Authorization Group in TDDAT table? 13) Difference between SU22 and SU24? 14) Explain Authorization Structure? 15) Which table stores the Authorization Object of a User? 16) What we do to keep Roles consistent in DEV QAS and PRD? 17) A User has create and display access? Will he have access to change as well? 18) How User can have access to view salary slip of other employees(HR Security)?Explain in detail. 19) In HR security does we add Employee ID anywhere in Roles? 20) Any issue you have faced while Transport? 21) Have you faced any issue in Upgrade? Expalain how to compare Roles from older version of SAP to new version of SAP? 22) Any typical issue you have resolved in HR Security?

0 Answers   ABB, CSC,

---

what is the process to find that one consultant had removed a table from sap tables

0 Answers  

---

what is the difference between adding tcode in menu and adding tcode using s_tcode ?

3 Answers   Pepsi, Tech Mahindra,

---

which ticketing tool is used in your company?Explain ticketig process?

2 Answers   IBM, TCS,

---

11.If the user don't have the access of su53?then how to fine the user missing authorization with out using st01?

6 Answers  

---