Answer / reddy

What is GRC ?

Governance, Risk, and Compliance.

The goal of GRC is to help a company efficiently put
policies and controls in place to address all its
compliance obligations while at the same time gathering
information that helps proactively run the business.

This means Ethical Business Process should comply with
Effective Process controls as per the related industry
Business Process and accounting Process and Govt Policy .

This GRC process finally Can Conculded with respect to Govt
Orgasnisations and Public Orgaanisation which are
Registered in Local Stock Markets are accountable to have
Effective Governance and Process Controls to Protect the
Share holder rights and Prevent Organised Corporate Fruads
and scams.

GRC Tools and IT applications

There are many GRC AUDIT tools in the Market to Facilitate
Internal and External Audit of the Companies .

What is SAP VIRSA Tool.

focused on 1) Access controls , 2) Process Controls.

It Has 4 Sections to Audit the system.

1. Compliance Caliberator
2. Role Expert
3. Firefighter
4. Access enforcer .

VIRSA systems is now takenover by SAP AG.

It has been aprt of Netwever and add on now .

Answer / gurugobinda

The above answer is partially Correct. But not entirely.

Virsa Was the the intial developer of the tool(in fact it
is a suite instead: combination of 4 tightly integrated
tools) and after taken oer by SAP AG in 2006, it has been
renamed as: SAP BO GRC Access Control. The tool is in a
continious deveopment track to improve its performance,
scalability and reliabilty. The current Version(5.3)is
built on SAP Netweaver Platform and Works purely on Java
stack. The 4 different tools of the AC suite have been
developed using java Webdynpro and .asp. Process Control is
not a part of Old virsa suite. It's rather a SAP product.
When GRC Access Control conecentrates more on IT and Acess
control, a it's name denotes, Process Control(PC) and Risk
Management(RM)is more on Financial Planning and Risk
Management.

Thanks,
Gurugobinda

Answer / the gimp

VIRSA produced a number of tools, most commonly used was
Compliance Calibrator.
SAP acquired VIRSA and integrated their tools into it's GRC
suite of products which have a wider span than the VIRSA
products.

You can use the VIRSA tools in ECC6. As the company no
longer sells these products it is an easy way to tell if a
candidate does not understand the GRC topic by them
referring to when they mean SAP GRC.

GRC as a subject has been hijacked by SAP's use of the term,
real GRC is much wider than a set of tools which can
automate part of the GRC process

Answer / i.javith nishar

Yes

Answer / raj

Hi Gurugobinda,

Just wanted to know whether this GRS tool will come as Add
on or customer has to buy it separetely, if its need to buy
is too costly, because we are planning to propose our
client to implement GRS tool for user creation automation.
So if its coming as an addon or cost effective means we can
propose it to client

Regards,
Raj

hou can i assign a same role to 200 users ?

4 Answers   IBM,

---

How we do Scheduled jobs in background to cleanup spool request, dumps

2 Answers   IBM,

---

what is the procedure to delete a role?

6 Answers   Cap Gemini, IBM, iGate,

---

What is the main difference between single role and a derived role?

1 Answers  

---

Whr will u find u Generation logs in BI security and What are Generation logs will come

2 Answers   IBM,

---

---

Hi , Currently i am working in an MNC company as an SAP Security tier1 member , we will take care of User Administration , Profile/authorization administration activities .Could any one tell me , is i am eligible to apply for an SAP Security job for 2 years experience . Could any one tell me about SOD , SOX Audit and Virsa tool , i have never worked before . Prakash

3 Answers   IBM,

---

can u tell me some of the password related parameters ?

5 Answers   IBM,

---

Hi Friends, I am sudheer from Hyderabad. i am looking for the training on SAP SECURITY GRC. KIndly let me know what are the best institute to learn in ameerpet area for this. Thanking you in advance.

5 Answers  

---

How to restrict except "Role" remaining all (user,etc everything) under SUIM T-Code ?

1 Answers   IBM,

---

What is difference between two sentences 1: " Using SUGR we allocate user to group ". 2: " In SU01 in Logon data we assign user to group " So, What is assigning and allocating ?

3 Answers   Patni,

---

how we do CUA configuration in Quality system

0 Answers   IBM,

---

Userdone tasks with ffid n system send log reports to controller in his work inbox but whenever its open its showing blank screen, why?

0 Answers   TCS,

---