CSI Announcement

Access Control & Governance for SAP Environments

CSI tools provides dynamic analytics solutions that deliver intelligence from and to decisions taken in access governance for SAP environments, including S/4HANA.

CSI tools' Governance, Risk and Compliance solution for SAP environments enables organizations to manage regulations and compliance and remove any risks in managing organization’s operations.

Offered as:

  • Software as a service
  • Managed service
  • On-Premise software

Solutions  About us  SAP Access Control

Reverse Engineering for the SAP security concept

Details
Published: Thursday, 01 May 2014 13:29

Is the organization secure with the current set up of the roles in SAP? Are your users happy with the assigned authorizations? If they are, the auditor probably is not happy with the assigned authorizations to the roles and users.

Maybe there are already plans to redesign the current authorization concept? How easy would it be if you can redesign the authorization concept with reverse business engineering? Instead of thinking and designing which authorization should be included in which role from scratch, just have a look at the authorization the users have and analyze the functionality the users have been using (or wanted to use) based on the executed transactions and assign these needed authorizations to the roles.

How to perform critical authorizations and SoD checks in SAP systems

Details
Published: Friday, 28 February 2014 14:45

This blog describes how you can set up the Segregation of duties (SoD) analysis for the SAP security concept. I compare 2 methods. The first one is using the standard SAP report RSUSR008_009_NEW and the second one is using CSI Authorization Auditor.

Who is doing what in your SAP system?

Details
Published: Friday, 27 December 2013 11:39

People who are using a SAP system all know the term "transaction code". SAP data is restricted using role based access controls. Users that get access to the SAP system via a Graphical User interface (I include portal-like functionality just to keep it simple) and the restriction of SAP table data for the users is managed by the assigned authorizations of this user.  If users want to have access to functionality in the SAP system, the transaction code is the front door to get access to this functionality.

Fine tuning your GRC filter set with Custom transactions

Details
Published: Tuesday, 10 December 2013 13:47

Sometimes it is necessary to create new (custom) transactions in the SAP systems. These customized transactions should always be taken into account when doing an audit/analysis on the authorizations concept.How to identify the authorization checks for these custom transactions?

Display roles - are they really display only?

Details
Published: Monday, 04 November 2013 13:26

Sometimes I come across roles within the SAP system that are setup and assigned as a display role. However, when further analyzing the roles it seems that the roles are not really display roles (any more). The first focus while setting up display roles is probably removing the non display ACTVT values for the corresponding authorization objects. The list of ACTVT values and meaning of the values can be found in table TACT.

Subcategories

Blog

Let's get personal

Let's get personal, request a demo!