Due to pressure of local regulatory compliance issues and/or corporate governance demands there is a growing awareness of Governance Risk and Compliance among executive management. Use CSI tools to document all (SOx) governance principles on the fly, test and get insight in the status of the current access governance and remediate the risks.
Read more: (SOx) Governance, Risk and Compliance with CSI tooling
Access certification provides the support for process and role owners to collect and manage attestations that users only have the access privileges required to perform their job function. It facilitates faster and accurate access reviews of user privileges by highlighting conflicting permissions in users' access entitlements that have to be revoked or approved under listed exceptions.
Due to pressure of local regulatory compliance issues and/or corporate governance demands there is a growing awareness of Governance Risk and Compliance among executive management. But what do we need to do to get (and stay) in control?
Read more: CSI Authorization Auditor instead of manual control
Sometimes I come across roles within the SAP system that are setup and assigned as a display role. However, when further analyzing the roles it seems that the roles are not really display roles (any more). The first focus while setting up display roles is probably removing the non display ACTVT values for the corresponding authorization objects. The list of ACTVT values and meaning of the values can be found in table TACT.
Sometimes it is necessary to create new (custom) transactions in the SAP systems. These customized transactions should always be taken into account when doing an audit/analysis on the authorizations concept.How to identify the authorization checks for these custom transactions?
Read more: Fine tuning your GRC filter set with Custom transactions