Answer / reddy

What is GRC ?

Governance, Risk, and Compliance.

The goal of GRC is to help a company efficiently put
policies and controls in place to address all its
compliance obligations while at the same time gathering
information that helps proactively run the business.

This means Ethical Business Process should comply with
Effective Process controls as per the related industry
Business Process and accounting Process and Govt Policy .

This GRC process finally Can Conculded with respect to Govt
Orgasnisations and Public Orgaanisation which are
Registered in Local Stock Markets are accountable to have
Effective Governance and Process Controls to Protect the
Share holder rights and Prevent Organised Corporate Fruads
and scams.

GRC Tools and IT applications

There are many GRC AUDIT tools in the Market to Facilitate
Internal and External Audit of the Companies .

What is SAP VIRSA Tool.

focused on 1) Access controls , 2) Process Controls.

It Has 4 Sections to Audit the system.

1. Compliance Caliberator
2. Role Expert
3. Firefighter
4. Access enforcer .

VIRSA systems is now takenover by SAP AG.

It has been aprt of Netwever and add on now .

Answer / shiva

SOD and SOX are used for SAP Audit purposes in the company
and Virsa tool is a 3rd party tool integrated with SAP,used
for finding of the risks before applying the roles (new) to
a user.

Answer / geethu

Hi Prakash,


If you are very strong in Security you can apply for
Security job for 2years..If you are not please dont
experiment in new company it wil a big problem for you.

And for SOD and SOX is very Important topic. SOD
Sagregation of Duty Analysis is fully automated tool which
is used for auditing.

SOD and SOX is very huge topic. You cannot understand until
you read relevant books and start practice

What is use of derived roles?

0 Answers  

---

what is user buffer?

0 Answers  

---

how to get ticket from end user?

5 Answers   Accenture,

---

Explain document transfer-level security?

0 Answers  

---

How we Assigning roles to users positions in HR, troubleshoot access issues

2 Answers   IBM,

---

How to find the roles which are not contains profiles

1 Answers   Cap Gemini, United Breweries UB,

---

Could any one tell me "What is critical authorizations in sap security"?

6 Answers   Accenture,

---

Hello!!! We are asked to generate a report/collect data on users concurrently accessed to the system and what operations they performed with their concurrent access. Apart from they want info on the duration of thier concurrent/normal session (date, time etc). Can anyone help us to know any particular transactions (as of our knowledge STAT & STAD can render certain segment of data), reports available with SAP to collect the above requested info.

5 Answers   Cap Gemini,

---

what is the difference between PFCG,PFCG_TIME_DEPENDENCY&PFUD???

3 Answers   IBM,

---

What is the latest change that was done to the SU53 trace, which is used to find the last authorization failure in SAP..???

4 Answers   IBM, Tech Mahindra,

---

Any details about secatt apart from SAPSecurity online.com?

0 Answers  

---

Giving fire call access and extending fire call access by using VIRSA’s VFAT tool? can u brief give the explanation

0 Answers   IBM,

---