L e a rn S A P G R C A l l r i g h t s r e s e r v e d
©
©
w w w .o J A Y o .c o m
w w w . o J A Y o . c o m
1
W h a t is S A P ? In t r o d u c t io n
w w w .o J A Y o .c o m
2
•
S ta r te d in 1 9 7 2
•
M o re th a n 7 0 %
•
L a r g e s t b u s in e s s s o f t w a r e c o m p a n y in r e v e n u e
•
M o r e th a n q u a r te r m illio n c u s to m e r s
•
M o r e t h a n 1 0 0 c o u n tr ie s
•
M o r e t h a n 5 5 0 0 0 e m p lo y e e s in 1 3 0 + c o u n tr ie s
•
A 4 0 y e a r s in n o v a tio n h is t o r y
o f fo r tu n e 1 0 0 c o m p a n ie s
S A P C o m p a n y
w w w .o J A Y o .c o m
3
•
a G e r m a n m u ltin a t io n a l c o m p a n y
•
O ffe r s E R P a n d o th e r E n te r p r is e I T s o lu tio n s
•
S A P = S y s te m , a p p lic a t io n s a n d p r o d u c t s f o r d a ta p ro c e s s in g
•
L e a d e r in e n t e r p r is e r e s o u r c e p la n n in g
•
M o re th a n 5 0 %
•
P o p u la r p r o d u c t s = E C C ( E n t e r p r is e c o r e c o m p o n a n ts ) B I ( B u s in e s s in te llig e n c e ) , H A N A ( H ig h p e r fo r m a n c e a n a ly t ic a l a p p lia n c e )
o f E R P m a rk e t s h a re
W h a t is S A P
w w w .o J A Y o .c o m
4
•
E R P = E n t e r p r is e r e s o u r c e p la n n in g
•
E R P = A n y e n te r p r is e s o ftw a r e w h ic h fu lfills m o r e th a n 2 fu n c tio n s in a c o m p a n y .
•
E n a b le s m a n y o f th e k e y c r itic a l IT fu n c tio n s o f a c o m p a n y .
E R P d e fin itio n
w w w .o J A Y o .c o m
5
•
C u s t o m e r S t r a t e g y & R e la t io n s h ip s ( M a r k e t in g )
•
E m p lo y e e D e v e lo p m e n t &
•
Q u a lit y , P r o c e s s Im p r o v e m e n t &
C h a n g e M a n a g e m e n t
•
F in a n c i a l A n a ly s is , R e p o r t in g , &
C a p it a l M a n a g e m e n t
•
M a n a g e m e n t R e s p o n s ib ilit y
•
C u s t o m e r A c q u i s it io n ( S a le s )
•
P r o d u c t D e v e lo p m e n t
•
P r o d u c t / S e r v ic e D e l iv e r y
•
A c c o u n tin g M a n a g e m e n t
•
T e c h n o lo g y M a n a g e m e n t
S a t is fa c tio n
K e y B u s in e s s p r o c e s s e s
w w w .o J A Y o .c o m
6
•
K e y p r o c e s s e s in a n y g iv e n c o m p a n y c a n b e s e g r e g a t e d in t o 1 0 m a in a r e a s .
•
B u t th e re a re h u n d r e d s o f s u b p ro c e s s e s n e e d e d to r u n th e c o m p a n y .
•
T h e g r e a t e s t C I O c h a lle n g e is t o I T e n a b le a ll t h e p r o c e s s e s w it h a n in t e g r a t e d e n t e r p r is e s o f tw a r e a p p lic a t io n .
•
S A P
f u lf ills th a t r a r e n e e d
S u b p r o c e s s e s
w w w .o J A Y o .c o m
7
• • • • • • • • •
M S C R R S H C U
in im a l in te g r a tio n u p p o r t fo r m u lti la n g u a g e , m u lti c u r r e n c y . e n tr a l u p d a te s e a l tim e in fo r m a tio n e d u c e s re d u n d a n t e r ro r s ta te o f th e a r t fe a tu r e s ig h e r e ffic ie n c y a n d s p e e d o f o p e r a tio n u s t o m iz a t io n is m in im a l s e o f b e s t in d u s t r y p r a c t ic e s
S A P A d v a n ta g e s
w w w .o J A Y o .c o m
8
• S in g le v e n d o r r e lia n c e & s o s lig h tly h ig h e r p r ic e s • H ig h s w itc h in g c o s t s • H ig h im p le m e n ta tio n c o s t s • S lo w
R O I ( r e tu r n o n in v e s t m e n t)
S A P d is a d v a n ta g e s
w w w .o J A Y o .c o m
9
• • • •
• • •
E C C 6 . 0 : F in a n c e A P , A R , G L , C o n tr o llin g , C o n s o lid a tio n : P u r c h a s in g , M a te r ia l m a n a g e m e n t , in v e n to r y : M a s te r d a ta m a n a g e m e n t B I/B W : B u s in e s s in te llig e n c e r e g a r d in g s a le s , o p e r a tio n s , fu lfillm e n t, in v e n to r y . H o w d o y o u k e e p c u r r e n t w ith P o r ta l : K n o w le d g e m a n a g e m e n t s y s te m G T S : G lo b a l tr a d in g s y s te m H A N A
S A P m o d u le s
w w w .o J A Y o .c o m
1 0
S A P S e c u r it y i s c o m p le x , 1 0 0 0 's o f u s e r s , 1 0 0 's o f r o le s , 1 0 0 0 's o f t r a n s a c t io n a n d a u t h . o b je c t s
U s e rs
S A P R o le
T -c o d e
w w w .o J A Y o .c o m
O b je c t s
1 1
W h a t is G R C •
G R o ffe th e e lim
•
T h e r e a r e 4 p r o d u c ts t h a t it o ffe r s e a c h a im e d a t a d d r e s s in g d iffe r e n t n e e d s . T h e y s e r v e th e fo llo w in g fu n c tio n .
• • • •
1 2 3 4
.) .) .) .)
C
A A A A
s ta n d s r s a s u ite o r g a n iz a in a tin g o
p p p p
ro d u ro d u ro d u ro d u
c t c t c t c t
fo o t io r m
to to to to
r G o f p ro n in itig
? v e rn a n d u c ts u id e n tify a tin g th
tro u b a n a ly m a n a m a n a
le z g g
c e , r is k a n d c o m p lia n c e . S A P n d e r G R C u m b r e lla w h ic h h e lp in g r is k a n d e ffe c tiv e ly e m .
s h o o t e m e r is k s a s e r o le b u e u s e r a s
e rg e n c y s o c ia te d ild life c y c s ig n m e n
w w w .o J A Y o .c o m
is w le ts
s u e s in S A P ith u s e r / r o le s . .
1 2
S A P G R C
p r o d u c t v e r s io n s G R C 4 . 0 ( V i r s a ) G R C 5 . 1 G R C 1 0 . . 0
E m e rg e n c y
F F : F ir e f ig h te r
S P M : S u p e ru se r E m e r g e n c y A c ce s s p r iv ile g e m a n a g e m e n t m a n a g e m e n t
R is k a n a ly s is
C C : C o m p lia n c e R A R : R is k a n a l y s is A c c e s s ris k a n a ly s is C a l i b r a t o r a n d r e m e d i a t i o n
R o le a s s i g n m e n t
A E : A c c e ss e n fo rc e r
C U P : C o m p lia n t u s e r A c c e s s re q u e s t p r o v i s i o n i n g m a n a g e m e n t
R o le b u ild w o r k flo w
R E : R o le A r c h it e c t
E R M : E n t e r p r is e r o le B u s in e s s r o le m a n a g e m e n t m a n a g e m e n t P ro c e s s c o n tro l
T e c h n o lo g y
(A b a p )
(Ja v a )
w w w .o J A Y o .c o m
(A b a p )
1 3
S A P G R C
F ir e fig h te r /S P M
• A d d r e s s e s t h e g r e a te s t a u d it c o n c e r n . A s s ig n m e n t o f S A P _ A ll • F ir e fig h te r is a to o l b y w h ic h s u p e r u s e r a c c e s s is g r a n te d to th e u s e r fo r tr o u b le s h o o tin g a n is s u e fo r a te m p e r o r y p e r io d . • A ll a c tio n s & a c tiv itie s o f th e u s e r a r e lo g g e d • A t th e e n d o f th e s e s s io n , th e a c tiv ity lo g is r e v ie w e d b y th e c o n tr o lle r o f r is k .
w w w .o J A Y o .c o m
1 4
R is k A n a ly s is &
r e m e d ia tio n
•
R A R is a to o l to id e n tify r is k a s s o c ia te d w ith a r o le o r a u s e r .
•
A s im p le e x a m p le o f r is k is if a u s e r h a s a c c e s s to th e fo llo w in g p r o c e s s c o m b in a tio n s . •
C r e a te v e n d o r &
m a k e p a y m e n ts
•
C r e a te p u r c h a s e o r d e rs a n d c r e a te a v e n d o r
•
A s s ig n r o le s / p r o f ile s t o s e lf
•
A c c e s s to m o d ify p r o g r a m s in p r o d u c t io n s y s t e m
•
A c c e s s to e x e c u te re p o r ts .
w w w .o J A Y o .c o m
1 5
S A P G R C •
•
• •
A c c e s s e n fo rc e r
T h is is t h e th ir d p r o d u c t in th e G R C s u ite . T h is p r o d u c t e n a b le s a u to m a tic r o le a s s ig n m e n ts , u s e r c r e a tio n s , u s e r m o d ific a tio n s w ith in b u ilt a p p r o v a l w o r k flo w . V a r io u s e n titie s a r e in v o lv e d lik e u s e r , R e q u e s to r , s e c u r ity a d m in is tr a to r , u s e r ’s m a n a g e r , R o le a p p r o v e r , e tc w h o p a r tic ip a te in th e w o r k f lo w . T h e r e is a n a p p r o v a l tr a il a n d a n a s s ig n m e n t p r o o f . R e d u c e s t h e r is k o f fr a u d u le n t u s e r a s s ig n m e n ts a s t h e r e a r e m o r e th a n o n e s e t o f e y e s in v o lv e d in m a n a g in g u s e r s . w w w .o J A Y o .c o m
1 6
G R C
R o le e x p e r t
•
R o le e x p e r t is u s e d to m a n a g e S A P r o le life c y c le .
•
R o le a d m in is t r a tio n in v o lv e s a lo t o f a d m in is t r a tiv e c h e c k s a n d la c k s t r a n s p a r e n c y fo r m a n a g e rs .
•
R o a v life c h
le e x p e r t is o a ila b le to m a c y c le w ith c o e c k s , a n d le a
n e n a g m p s t a
o f th e m e th e e le te tr a d m in is
o s t n tir e n s p a t r a tio
w w w .o J A Y o .c o m
e ffic ie r o le b re n c y n o v e
n t w u ild , in b rh e a
a y s / m o d ify u ilt s o x d s .
1 7
W h a t is R is k ?
w w w .o J A Y o .c o m
1 8
•
R is k to o r g a n iz a tio n is d e fin e d a s a n y a c t iv ity t h a t p o s e s a th r e a t to o r g a n iz a tio n s a b ility in d a y to d a y fu n c tio n in g .
•
T o e lla b o r a te , a fin a n c ia l fr a u d in a c o m p a n y is a th r e a t.
•
U n a v a ilb ility o f s y s t e m
d u e to a n y r e a s o n is a th r e a t.
w w w .o J A Y o .c o m
1 9
W h a t is S O X ? •
S O X o r S A R B O X s t a n d s f o r S a r b a n e s O X l e y - a U n ite d S ta te s fe d e r a l s e c u r itie s la w s p o n s o r e d b y t w o g o v e r n m e n t o ffic ia ls b y th e n a m e o f •
U .S . S e n a to r P a u l S a r b a n e s
•
U . S . r e p r e s e n t a t iv e M ic h a e l G
O x le y
T h e la w w a s im p le m e n te d a fte r a s e r ie s o f la r g e s c a le a c c o u n tin g s c a n d a ls t h a t h it E n r o n , w o r ld c o m , T y c o , P e r e g r in e s y s t e m s . T h e s c a n d a ls e r o d e d p u b lic s c o n fid e n c e a n d c o m p a n ie s s t o c k p r ic e s a n d p u b lic in g e n e r a l lo s t a lo t o f in v e s te d fu n d s .
w w w .o J A Y o .c o m
2 0
S a r b a n e s & O x le y
w w w .o J A Y o .c o m
2 1
S O X L a w
h ig h lig h ts
•
T h e l a w h o ld s c o m p a n ie s t o p m a n a g e m e n t C E O th e a c c o u n tin g s ta te m e n ts o f th e c o m p a n y .
•
1 .) A n c a lle d (P C A O p u b lic
•
2 .) E x t e r n a l a u d it o r in d e p e n d e n c e , a u d it o r p a r tn e r r o ta tio n , a u d ito r a p p r o v a l a n d s e le c t io n p r o c e s s , a u d ito r r e p o r tin g r e q u ir e m e n ts .
•
3 . ) C E O /C F O o f t h e c o m p a n y m u s t t a k e th e o w n e r s h ip o f th e a c c u r a c y a n d c o m p le te n e s s o f th e ir fin a n c ia l s ta te m e n ts .
e w P u B a c
g o v b lic ). P C c o u n
e rn m C o m A O B tin g
e n p a o v a u d
/ C F O
to
t o r g a n iz a t io n c a m e in t o e x is te n c e n y A c c o u n tin g O v e r s ig h t B o a r d e r lo o k s a c c o u n tin g p r a c t ic e s o f it fir m s .
w w w .o J A Y o .c o m
2 2
•
T h e S a r b a n e s - O x le y A c t o f 2 0 0 2 is a f e d e r a l la w d e s ig n e d to h e lp r e d u c e fin a n c ia l s t a te m e n t fr a u d a n d a c c o u n tin g ir r e g u la r itie s .
•
T h e la w w a s e n a c te d b y C o n g r e s s a s a re s p o n s e to s e r ie s o f c o r p o r a te a c c o u n tin g s c a n d a ls t h a t h a d r a ttle d p u b lic c o n fid e n c e in th e d o m e s t ic e q u ity m a r k e ts .
•
It re q u th e ir d fin a n c c e r tify in te n d
ir e s is c lo ia l r e th a t e d .
th a t p u b s u re c o p o r tin g th e c o n
lic n tr a n tro
c o m p o ls a n n u a lly ls a r e
a n ie s d o c u m d in te r n a l c o n a n d th a t th e e ffe c tiv e a n d
w w w .o J A Y o .c o m
e n t a n d te s t b o th tr o ls o v e r C E O a n d C F O o p e r a tin g a s
2 3
•
F O R M
•
IT E M
• f in 1 9 E x o u E x •
a 3 e r c
In m O rg B a s e ffe
1 0 - K 9 A .
M a n c ia l re 4 . U n d c u tiv e in t e r n a h a n g e
C o n tr o ls a n d P ro c e d u r e s n a g e m e n t is r e s p o n s ib le p o r t in g , a s s u c h t e r m is e r th e s u p e r v is io n a n d w O f fic e r a n d C h ie f F in a n c l c o n t r o l o v e r f in a n c i a l r e A c t o f 1 9 3 4 R u le 1 3 a - 1 5
a k in g th is a n i z a tio n s e d o n o u r c t iv e a s o f
a s s e s o f th e e v a lu a J a n u a
s m T r tio ry
e n e a n , 2 9
t, w d w a m a n , 2 0
e u y C a g 1 1
fo r e s t a b l is h in g d e f in e d in R u le ith th e p a r tic ip a ia l O ff ic e r , w e c p o r t in g a s o f J a (c ).
a n d m a in t a in in g a d e q u a t e in t e 1 3 a - 1 5 ( f) o f th e S e c u r itie s E x c tio n o f o u r m a n a g e m e n t , in c lu d o n d u c t e d a n e v a lu a tio n o f th e e n u a r y 2 9 , 2 0 1 1 a s r e q u ir e d b y
rn a l c o n tro l o v e r h a n g e A c t o f in g o u r C h ie f ffe c t iv e n e s s o f t h e S e c u r it ie s
s e d t h e c r ite r ia s e t fo r t h b y t h e C o m m it te e o f S p o n s o r in g o m m is s io n ( " C O S O " ) in I n t e r n a l C o n tr o l - I n t e g r a t e d F r a m e w o r k . e m e n t c o n c lu d e d t h a t in t e r n a l c o n tr o l o v e r fin a n c ia l r e p o r t in g w a s .
w w w .o J A Y o .c o m
2 4
S O X - C o n s e q u e n c e s o f n e g lig e n c e •
I n t e r n a l c o n t r o l d e f ic ie n c ie s c a n le a d t o a s ig n if ic a n t d e f i c i e n c y a n d / o r a m a t e r ia l w e a k n e s s .
•
I n b o t h in s t a n c e s , t h e C o m p a n y w ill h a v e t o a b s o r b h ig h e r e x t e r n a l a u d it f e e s .
•
A d d it io n a l ly , in t h e l a t t e r in s t a n c e t h e C o m p a n y ’s s h a r e p r ic e s c o u ld b e a d v e r s e ly i m p a c t e d .
•
T a C in e
•
T h e C o m p a n y c o u l d f a c e f in e s , in v e s t o r lit ig a t io n , m o r e r ig o r o u s s c r u t i n y b y t h e S E C , a n d / o r b e d e lis t e d f r o m t h e N Y S E .
h e C E n d /o r o m p a te rn a ff e c t iv
O a n d C F O ja i l t i m e f o r n y ’s d is c lo s l c o n tro l o v e e ly .
c o u ld fa ls e ly u re c o r f in a n
fa c e n tr c ia
c e s u b r tif y in g o ls a n d l re p o r
s ta n th a /o r t in g
t ia l f in e s t th e s y s te m o f is o p e r a t in g
w w w .o J A Y o .c o m
2 5
In te r n a l c o n tr o l p r im e r •
C O S O –
•
e v a lu a tio n a n d d is c lo s e
In te r n a l C o n tro l: –
•
F ra m e w o rk :
R e c o g n iz e d b y th e S E C a s a n e f fe c tiv e f r a m e w o r k to s a tis f y t h e I C r e q u ir e m e n t s o f S O X
A p r o c e s s e f f e c t e d b y a n e n t it y 's B o a r d o f D ir e c t o r s , m a n a g e m e n t a n d o t h e r p e r s o n n e l d e s i g n e d t o p r o v id e r e a s o n a b l e a s s u r a n c e r e g a r d i n g t h e a c h i e v e m e n t o f o b je c t iv e s i n O p e r a t io n s , F in a n c ia l R e p o r t in g , a n d R e g u l a t o r y C o m p l ia n c e .
C a te g o r ie s : – – –
E f f e c t i v e n e s s a n d e f f i c i e n c y o f o p e r a t i o n s R e l i a b i l i t y o f f i n a n c i a l r e p o r t i n g C o m p l i a n c e w i t h a p p l i c a b l e l a w a n d r e g u l a t i o n s
w w w .o J A Y o .c o m
2 6
T y p e s o f c o n tr o ls • •
P P D t
r e v e n t a t iv e r e v e n t a t iv e e s ig n e d to h e m
• •
K K b F a
e y v e rs e y - A p u s in e s s a ilu r e o u d ita b le
•
•
u s r im o b f k e
v e rs u s - D e s ig d is c o v e
D e t n e d r u n
e c to d e
t iv e d e t e r u n d e s ir a b le e v e n t s f r o m o c c u r r in g D e t e c t iv e s ir a b le e v e n ts t h a t h a v e a lr e a d y o c c u r r e d a n d c o r r e c t
S e c o n d a ry a r y c o n t r o l a c t iv it y d e s ig n e d t o r e d u c e t h e r is k a s s o c ia te d w it h a c r itic a l je c t iv e y c o n t r o ls c a n r e s u lt in t h e o v e r a ll f a ilu r e o f t h e o r g a n iz a t io n m u s t b e
S e c o n d a r y - D e s ig n e d t o r e d u c e t h e r is k o f n o n c r it ic a l b u s in e s s o b je c t iv e s C a n r e in f o r c e k e y c o n t r o l a c t iv i t ie s . D o n o t h a v e t o b e a u d it a b le
w w w .o J A Y o .c o m
2 7
In te r n a l c o n tr o l - e x a m p le s •
•
E x a m p le s o f c o n t r o ls –
A c c e s s S e c u r i t y
–
L o g i c a l a n d P h y s i c a l
C h a n g e C o n tro l –
•
•
A p p l i c a t i o n a n d I n f r a s t r u c t u r e
C o m p u te r O p e ra tio n s –
B a t c h P r o c e s s i n g
–
B a c k u p & R e c o v e r y a n d I n c id e n t M a n a g e m e n t
P ro g ra m –
D e v e lo p m e n t
P r o j e c t m a n a g e m e n t m e t h o d o l o g y
w w w .o J A Y o .c o m
2 8
S o x D e fic ie n c y •
D e fin it io n
•
A c d c o o o p c
•
S e v e r it y
•
I m p a c t – M a g n i t u d e o f p o t e n t ia l m is s t a t e m e n t if n o t m it ig a t e d
•
L i k e l i h o o d – I n h e r e n t r i s k p r io r t o m i t i g a t i o n
•
C a t e g o r ie s
•
D e fi c ie n c y
•
R e p o rt e d to s e n io r m a n a g e m e n t
•
S ig n if ic a n t
•
R e p o r t e d t o s e n io r m a n a g e m e n t a n d t h e A u d i t C o m m i t t e e
•
M a te r ia l W e a k n e s s
•
R e p o r t e d t o s e n io r m a n a g e m e n t , t h e A u d it C o m m it t e e a n d r e s u lt s in a n a d v e r s e o p in i o n o n in t e r n a l c o n t ro l s r e p o r te d in t h e 1 0 - K f ilin g .
d e f i c ie n c y in in t e r n a l c o n t r o l s w h i c h c o u l d a d v e r s e l y a f f e c t th e o m p a n y ' s a b i li t y t o d e l i v e r a c c u r a t e f i n a n c i a l r e p o r t i n g . A d e s i g n e f ic i e n c y e x is t s w h e n a n e c e s s a r y c o n t ro l is m is s i n g o r a n e x is t in g o n t r o l is n o t p r o p e r ly d e s i g n e d s o t h a t e v e n w h e n t h e c o n t ro l is p e r a t in g a s d e s ig n e d t h e c o n t r o l o b je c t iv e is n o t a lw a y s m e t . A n p e r a t in g d e f ic i e n c y e x i s t s w h e n a p r o p e r ly d e s ig n e d c o n t ro l is n o t p e r a t in g a s d e s i g n e d o r th e p e r s o n p e r f o r m in g a c o n t r o l d o e s n o t o s s e s s t h e n e c e s s a r y a u t h o r it y o r q u a l if ic a t io n s t o p e r f o r m t h e o n t r o l e f f e c t iv e l y .
w w w .o J A Y o .c o m
2 9
•
N e x t : S e g r e g a tio n o f d u tie s
w w w .o J A Y o .c o m
3 0
S A P
G R C
w h a t is S e g r e g a tio n o f d u tie s
w w w .o J A Y o .c o m
3 1
W
h a t is S O D is o n e r p r is e . e th a n in th e
?
•
T h is e n te m o r ta s k
o f th e k e T h e p r in o n e p e rs b u s in e s s
y c o n tr o l p r in c ip le in a n c ip le r e c o m m e n d s u s in g o n to c a r r y o u t a n im p o r ta n t .
•
T h is a lig n s t o 4 e y e / tw o s ig n a tu r e p r in c ip le a n d h e lp s to r e d u c e th e c h a n c e s o f fin a n c ia l fr a u d s a n d ir r e g u la r itie s .
•
T h is p r in c ip le g a in s f u r th u r im p o r ta n c e in a n S O X s y s te m .
w w w .o J A Y o .c o m
3 2
S e g r e g a tio n o f d u tie s •
•
S e g r e g a tio n o f d u tie s is t h e c o n c e p t o f h a v in g tw o o r m o r e p e r s o n s in v o lv e d in e x e c u tio n o f a c r it ic a l t a s k . T h e o b je c t iv e is t o r e d u c e t h e p o s s ib ility o f fr a u d in a c o m p a n y a n d to h a v e b e tte r c o n tr o l o n o r g a n iz a tio n d a y t o d a y o p e r a tio n s . T o g iv e a s im p le e x a m p le , im a g in e if a u s e r is a b le to p o s t p a y m e n ts a n d a ls o r e c e iv e g o o d s . T h is w o u ld b e a r is k to th e o r g a n iz a tio n a s h e is n o w a b le to p o s t p a y m e n ts o n c o m p a n y b e h a lf a n d r e c e iv e g o o d s . h e h a s n o w th e a u th o r ity t o e x e c u te a fr a u d u le n t p a y m e n t a n d r e c e iv e g o o d s . w w w .o J A Y o .c o m
3 3
•
S o in a n o r g a n iz a tio n s a ll s e n s itiv e e n d to e n d fu n c t io n s a r e id e n tifie d a n d ta s k s a s s o c ia te d a r e d is tr ib u te d to o n e o r m o re p e r s o n s .
•
S e g r e g a tio n o f d u tie s is a k e y c o n c e p t o f in te r n a l c o n tr o ls .
•
T o s u m m a r iz e , C o m p a n y 's c r it ic a l p r o c e s s e s m u s t b e s e g re g a te d to p re v e n t fra u d s a n d e rro rs .
w w w .o J A Y o .c o m
3 4
T h e p a tte r n to m in im iz e r is k is : •
T h e 3 s te p s t o m a n a g in g r is k is t o id e n tify , d iv id e , s e g r e g a te fu n c t io n . • I d e n t i f y c r i t i c a l p r o c e s s e s a n d a s s o c i a t e d r i s k s . G R C s o lu tio n fr o m S A P a s s is t s in id e n tific a tio n o f th e s e fu n c tio n s a n d r is k s . Id e n tify S A P t r a n s a c t io n s a n d a u t h o r iz a t io n o b je c t s a s s o c ia te d w ith th o s e c r itic a l p r o c e s s e s a n d b u s in e s s fu n c t io n s . • D i v i d e c r i t i c a l b u s i n e s s f u n c t i o n i n t o s u b p r o c e s s e s to a p p ly s e g r e g a tio n o f d u tie s in th e o r g a n iz a tio n . • A s s i g n e a c h s u b p r o c e s s t o d i f f e r e n t p e r s o n o r te a m . w w w .o J A Y o .c o m
3 5
S e g r e g a te th e fo llo w in g fu n c tio n s • • • • •
to c o m b in e a c c o u n t) a d e p o s itin g a p p r o v in g R e c e iv in g c r e a tin g r o
r o le s s u c n d a p p ro v c a s h a n d tim e c a r d s g o o d s a n d le s a n d a s
h a in g re c a n m s ig
s r e c e iv in g c h e c k s ( p a y m e n t o n w r ite - o ffs . o n c ilin g b a n k s t a te m e n ts . d h a v e c u s to d y o f p a y c h e c k s . a k in g p a y m e n t s . n in g th e r o le s in a s y s t e m
w w w .o J A Y o .c o m
3 6
C a te g o r ie s o f s e g r e g a tio n • • • • •
IT S e c u r ity f u n c t io n - A s s ig n v s c r e a te r o le s . R e c o r d in g fu n c t io n , e .g . p r e p a r in g s o u r c e d o c u m e n ts o r c o d e o r p e rfo rm a n c e r e p o rts s p littin g o n e s e c u r ity k e y in tw o ( m o r e ) p a r ts b e tw e e n r e s p o n s ib le p e r s o n s c u s to d y o f a s s e t w h e th e r d ir e c tly o r in d ir e c tly , e .g . r e c e iv in g c h e c k s in m a il o r im p le m e n tin g s o u r c e c o d e o r d a ta b a s e c h a n g e s . r e c o n c ilia tio n o r a u d it
w w w .o J A Y o .c o m
3 7
S O D
g o v e r n a n c e
•
In a p e r fe c t IT g o v e r n a n c e w o r ld , n o o n e p e r s o n s h o u ld h a n d le m o r e th a n o n e s u b p r o c e s s .
•
T h e c h a lle n g e c o m e s b e c u a s e o f th e s iz e o f th e c o m p a n y , c o m p le x it y o f p r o c e s s e s , e m p lo y e e 's a c c e p ta n c e to c h a n g e in p r o c e s s to n a m e a fe w .
T h a n k y o u w w w .o J A Y o .c o m
3 8
w w w .o J A Y o .c o m
3 9
S A P G R C A u d i t n e e d s a d d r e s s e d
w w w .o J A Y o .c o m
4 0
A u d i t n e e d s a n d r i s k i d e n t i f i c a t i o n •
A u d it n e e d s b e in g a d d r e s s e d
•
W h a t is r is k a n d c a te g o r ie s o f r is k .
•
H o w
•
E x a m p le s o f r is k .
is r is k r e p r e s e n t e d in S A P G R C
w w w .o J A Y o .c o m
4 1
A u d i t N e e d s f u l f i l l e d E m e r g e n c y A c c e s s M a n a g e m e n t ( E A M • S a s • A c o • A a n
A P _ A L L s ig n e d . c c e s s is m p a r e d d e t a ile y g iv e n
k e y s to m o d u le to S A P d lo g I s t im e .
t h e k in g d o m s p e c if ic a n d _ A L L a v a ila b le f o r
A c c e s s r is k A n a ly s is ( A R A ) ) o n t in u e s im u la t io n is n o t s s ig n m e n • i t ig a t i n g lim it e d • O D / S e n r e v ie w a t
A c c e s s r e q u e s t m a n a g e m e n t ( A R M ) •
•
M w a A c
a n a g e r o r k f lo w v a ila b le r e q u e s h a n g e i
’s a p p r o v . A c c e s s a t a ll t im t c a n b e n th e s y s
• •
C S a M S
c o m p lia n c e o f u s e r b e fo r e t c o n t r o ls e x is t . s it iv e a c c e s s is
a c t m o
u a l n it o r e d
B u s in e s s r o le m a n a g e m e n t ( B R M )
a l is a t t a c h e d t o a p p r o v a l e v id e n c e is e s t ie d t o t h e a c t u a l • R t e m . • R • A a n
o le m o le m c h a n d a r
w w w .o J A Y o .c o m
o d if ic o d if ic g e c a e q u e s
a t io n a t io n n b e to r .
u n d e r g o is t r a n s p t ie d t o a
e s s o x c h e c k . a r e n t. s p e c if ic r e q u e s t
4 2
R is k :
p o s s ib ilit y o f F I o r m a t e r ia l d e f ic i e n c y o r s y s t e m
S e n s it iv e f u n c t io n T a o c a c e A O M S C C
h e r e a r e c t iv it ie s r g a n iz a t o n s id e r e n d n e e d a r e f u lly m p lo y e e
r is k
c e r t a in in S A P a n d io n w h ic h a d to b e s e n to b e e x e c b y s e n io r S a n d u s in g
r is k , T h e r e b y t h r e a t
S e g r e g a t io n
o f D u t ie s r is k
S o m e b u s in e s s p r o c e s s e s in s h o u ld n o t b e jo in t ly r e a s s ig n e d t o a s in g le u s e r . s it iv e A s s ig n in g t h e m t o a s in g le u t e d u s e r m ig h t in t r o d u c e r is k A P in t h e s y s t e m o f F F . f r a u d u l e n t a c c o u n t i n g , m a t e r ia l o r s y s t e m r c h i v i n g ( S A R A ) a c t i v i t y . p e n c lo s e s y s t e m ( S C C 4 ) a s s u p d a te s ( L S M W ) C r e a t e v e n d o r + p a y m e n t s c r i p t i n g ( S E C A T T ) P O p r o c e s s + G o o d s u t t i n g c h e c k s ( F C H K ) w w w . o J A Y r o e . c c o e m i p t 4 3 u s t o m e r c r e a t e U s e r c r e a t e + R o l e a s s i g n
R is k s tr u c tu r e in S A P G R C G l o b a l s e t R u l e s e R is k ( P O P O
* G R
t
R is k
) G R
B u s in e s s fu n c t io n
A c t io n s
M E 2 1 M E 2 2 M I G O M B 0 1 M o v e m e n t D o c t y p e O r g v a l u e s O r g v a l u e s P e r m i s s i o n s t y p e
w w w .o J A Y o .c o m
4 4
S u m m a r y - A u d it p a in p o in ts a d d r e s s e d •
•
•
•
�
�
�
�
S u p e r u s e r P r iv ile g e M a n a g e m e n t –
– A llo w
s u p e r u s e r a c c e s s
–
– M o n ito r a n d r e p o r t a c tio n s p e rfo r m e d
R is k A n a ly s is a n d R e m e d ia t io n –
– Id e n tify a n d r e m o v e S O D
–
– M i t i g a t i o n c o n t r o l s
i s s u e s
C o m p lia n t U s e r P r o v is io n in g –
– S A P a c c e s s p r o v is io n in g w it h a p p r o v a l w o r k f lo w
–
– C e n tr a lis e d c r e a tio n o f n e w
u s e r s
R e p o r tin g –
– V is ib ilit y a c r o s s t h e la n d s c a p e o f r is k , v io la t io n s a n d m it ig a t io n
w w w .o J A Y o .c o m
4 5
S ta r tin g R A R
: /n /V ir s a /Z v r a t
w w w .o J A Y o .c o m
4 6
S e le c t S A P R /3 a n d r o le A u d ito r
w w w .o J A Y o .c o m
4 7
S A P G R C
D a s h b o a r d / c o c k p it
w w w .o J A Y o .c o m
4 8
S e le c t g lo b a l r u le s e t
w w w .o J A Y o .c o m
4 9
R o le b u ild
w w w .o J A Y o .c o m
5 0
T r a n s a c tio n s in c lu d e d •
K n o w n c o n f lic t b e tw e e n P O
c r e a te / G R
w w w .o J A Y o .c o m
5 1
A u t h o r i z a t i o n o b j e c t s i n c l u d e d
w w w .o J A Y o .c o m
5 2
•
U s e r = R is k y u s e r
•
R o le = Z R O L E _ W IT H _ R IS K
•
R o le t y p e = s in g le
•
S c e n a r io = r o le c h e c k a n a ly s is
w w w .o J A Y o .c o m
5 3
I . R is k a n a ly s is – R o le , H ig h le v e l, o b je c t le v e l
w w w .o J A Y o .c o m
5 4
R e s u lt – S o x c h e c k •
F ig . b e lo w d e ta ils h o w tr a n s a c tio n s .
th e r o le its e lf h a s c o n flic tin g
w w w .o J A Y o .c o m
5 5
I I . R is k a n a ly s is – r o le , a ll le v e l, a u t h o b je c t
w w w .o J A Y o .c o m
5 6
R e s u lt – S o x c h e c k •
O u t p u t s h o w s 2 h ig h a n d 2 m e d iu m
w w w .o J A Y o .c o m
c o n f lic ts
5 7
3 . R is k a n a ly s is – R o le , A ll le v e l, T r a n s a c tio n c h e c k
w w w .o J A Y o .c o m
5 8
R e s u lt – s o x c h e c k T x . le v e l •
T r a n s a c t io n le v e l
w w w .o J A Y o .c o m
5 9
H o w
to s im u la te
w w w .o J A Y o .c o m
6 0
R is k a n a ly s is c h e c k b y s im u la tio n •
O n ly in c r e m e n ta l r is k – w h a t if s c e n a r io
w w w .o J A Y o .c o m
6 1
R is k a n a ly s is b y s im u la tio n : to ta l
w w w .o J A Y o .c o m
6 2
T y p e s o f R e p o r t v ie w s •
I. S u m m a r y v ie w
w w w .o J A Y o .c o m
6 3
I I . D e t a il v ie w
w w w .o J A Y o .c o m
6 4
•
III. T e c h n ic a l v ie w
w w w .o J A Y o .c o m
6 5
•
I V B u s in e s s v ie w
w w w .o J A Y o .c o m
6 6
B e s t s e le c tio n fo r r is k a n a ly s is
w w w .o J A Y o .c o m
6 7
R is k a n a ly s is – u s e r , h ig h le v e l, o b je c t le v e l
w w w .o J A Y o .c o m
6 8
R is k a n a ly s is – u s e r le v e l •
H ig h le v e l c o n f lic t s c h e c k a t o b je c t le v e l.
w w w .o J A Y o .c o m
6 9
C o n c lu s io n s •
A ll in d iv id u a l r o le s n e e d to b e c le a n o f s o x c o n flic t s . S O X c h e c k to b e m a n d a to r y in r o le b u ild o r m o d ific a tio n a n d in u s e r a s s ig n m e n ts .
•
M o r e f a ls e p o s it iv e s a t t r a n s a c t io n le v e l t h a n a t o b je c t le v e l.
•
I d e a l m o d e = c le a n a t b o t h T x . L e v e l a n d a u t h . O b je c t s le v e l
w w w .o J A Y o .c o m
7 0
S A P G R C
M itig a tio n
w w w .o J A Y o .c o m
7 1
R o le M itig a tio n
w w w .o J A Y o .c o m
7 2
w w w .o J A Y o .c o m
7 3
U s e r M itig a tio n
w w w .o J A Y o .c o m
7 4
w w w .o J A Y o .c o m
7 5
M itig a tio n s tr u c tu r e •
H o w
to c r e a te M itig a tio n s t r u c t u r e ?
•
S te p 1 : C r e a te B U
•
S te p 2 : A s s ig n A p p r o v e r a n d M o n ito r
•
S te p 3 : C r e a te M it c o n tr o l
•
S te p 4 : A s s ig n m itig a tio n s
w w w .o J A Y o .c o m
7 6
C r e a tin g B u s in e s s u n it in S A P •
S te p 1 : c r e a te b u s in e s s u n it e n tr ie s fo r m itig a tio n .
w w w .o J A Y o .c o m
7 7
S te p 2 : Id e n tify M o n ito r & C o n tr o lle r •
M o n ito r = M itM o n ito r
•
C o n tr o lle r = M itC o n tr o l
w w w .o J A Y o .c o m
7 8
M itig a tio n M o n ito r
w w w .o J A Y o .c o m
7 9
M itig a tio n C o n tr o lle r
w w w .o J A Y o .c o m
8 0
M itig a tio n A p p r o v e r
w w w .o J A Y o .c o m
8 1
S te p 2 : C r e a te A p p r o v e r & M o n ito r
w w w .o J A Y o .c o m
8 2
w w w .o J A Y o .c o m
8 3
S te p 3 A s s i g n A p p r o v e r a n d M o n i t o r f o r t h e B U
w w w .o J A Y o .c o m
8 4
S te p 4 : C r e a te M itig a tio n c o n tr o l
w w w .o J A Y o .c o m
8 5
M a n a g e m e n t re p o r ts a n d A l e r t s
w w w .o J A Y o .c o m
8 6
w w w .o J A Y o .c o m
8 7
w w w .o J A Y o .c o m
8 8
w w w .o J A Y o .c o m
8 9
w w w .o J A Y o .c o m
9 0
R u le a r c h ite c t
w w w .o J A Y o .c o m
9 1
B u s in e s s p r o c e s s e s
w w w .o J A Y o .c o m
9 2
B u s in e s s p r o c e s s - c r e a te
w w w .o J A Y o .c o m
9 3
II. F u n c tio n – D is p la y , C h a n g e
w w w .o J A Y o .c o m
9 4
F u n c tio n - c r e a te
w w w .o J A Y o .c o m
9 5
III. R is k – D is p la y , C h a n g e
w w w .o J A Y o .c o m
9 6
R is k - c r e a te
w w w .o J A Y o .c o m
9 7
R u le s – c o n flic tin g tr a n s a c tio n s
w w w .o J A Y o .c o m
9 8
R u le s – c o n flic tin g tr a n s a c tio n s
w w w .o J A Y o .c o m
9 9
R u le s – c o n f lic t in g o b je c t s .
w w w .o J A Y o .c o m
1 0 0
C r itic a l tr a n s a c tio n s - M a in ta in
w w w .o J A Y o .c o m
1 0 1
E x is tin g e n tr ie s
w w w .o J A Y o .c o m
1 0 2
N e w
e n tr ie s
w w w .o J A Y o .c o m
1 0 3
U p lo a d c r itic a l tr a n s a c tio n s
w w w .o J A Y o .c o m
1 0 4
D o w n lo a d e x is tin g c r itic a l T x . e n tr ie s
w w w .o J A Y o .c o m
1 0 5
O u tp u t o f ta b le •
F ile d o w n lo a d e d a s b e lo w w h ic h c a n b e o p e n e d w ith n o te p a d o r e x c e l.
w w w .o J A Y o .c o m
1 0 6
II. C r itic a l R o le s - M a in ta in
w w w .o J A Y o .c o m
1 0 7
N e w
e n try
w w w .o J A Y o .c o m
1 0 8
G R C
T a b le e n tr ie s v ia T r a n s p o r ts
w w w .o J A Y o .c o m
1 0 9
C r itic a l r o le s – u p lo a d /d o w n lo a d
w w w .o J A Y o .c o m
1 1 0
III. C r itic a l p r o file s
w w w .o J A Y o .c o m
1 1 1
R u le m a tr ix m o d ify
w w w .o J A Y o .c o m
1 1 2
w w w .o J A Y o .c o m
1 1 3
R u le A r c h ite c t – M a in ta in o r g . r u le s
w w w .o J A Y o .c o m
1 1 4
T r a n s p o r tin g R u le s e ts
w w w .o J A Y o .c o m
1 1 5
C o n fig u r a to r
w w w .o J A Y o .c o m
1 1 6
w w w .o J A Y o .c o m
1 1 7
S A P G R C A c c e s s m a n a g e m e n t
w w w .o J A Y o .c o m
1 1 8
T O A N R G E T
S A P G R C C U P A c c e s s m a n a g e r u s e r p r o v i s io n in g p r o v i d e s a u t o m a t ic u s e r a c c o u n t c r e a t io n s a n d r o le a s s ig n m e n t s w it h in b u ilt w o r k flo w a b ilit y . It a u t o m a t e s m u lt ip l e m a n u a l p r o c e s s e s in c o n v e n t io n a l a c c o u n t c r e a t io n a n d r o le a s s ig n m e n t p r o c e s s e s . P r o v id e s b e t t e r c h a n g e lo g t ra c e a b ilit y , m a n a g e r a p p r o v a ls ,
C U P p r e v e n t s s e g r e g a t io n o f d u t ie s v i o l a t io n s . P r o v id e s b e t t e r S O X p r o c e s s c o m p lia n c e a d h e r e n c e . A d m in i s t r a t io n l o a d / b o t t l e n e c k s g e t r e d u c e d a n d r e q u e s t s g e t e x p e d it e d f a s t . A c c e s s m a n a g e r c o m e s w it h p o w e r fu l in b u ilt re p o r ts
1 1 9
T e s t . c o m
T O A N R G E T
S A P G R C C U P A c t i o n s i n w o rr kk f l o w
C r e a t in g u s e r , m o d if y in g u s e r a c c o u n t .
D e l e t io n o f u s e r a c c o u n t .
U s e r lo c k m a n a g e m e n t
U s e r p a s s w o r d m a n a g e m e n t
R o le a s s ig n m e n t s to u s e r s
U s e r A c c e s s r e v ie w / B a s e lin e s / C o n s o lid a t io n / C o m p l ia n c e / A t te s ta t io n p r o c e s s.
1 2 0
T e s t . c o m
T O A N R G E T
A c c e s s M a n a g e r e n t it ie s .
1 2 1
T e s t . c o m
A c c e s s e n f o r c e r / C U P •
A c c e s s e n fo r c e r is a n e n d t o e n d w o r k f lo w fo r u s e r p r o v is io n in g .
•
A m g m
n y u s a n a g e n e ra a n a g
•
O r r a
n a p e q u e o le o p p ro
e r c a e r. A te d a e r a s
p r s t w n v a
n re q re q u n d fo s te p
o v a l fro m g e ts fo rw e rs fo r th ls .
u e s t a r o le in a c c e s s e s t n u m b e r is a u t o r w a r d e d t o u s e r 's 1 . u s a rd e ir
e r e d re
m a to s p e
n a g e r, th e in d iv id u a l c t iv e r o le
•
F in a l r e v ie w is b y t h e s e c u r it y te a m t o e n s u re th a t th e re q u e s t d o e s n o t c a u s e a n y s e c u r ity g a p s .
•
A ft e r o b t a in in g a ll t h e n e c e s s a r y a p p r o v a ls , t h e r o le g e ts a u t o - a s s ig n e d to th e u s e r.
w w w .o J A Y o .c o m
1 2 2
C U P a u to m a t e d w o r k flo w 1 . u s e r jo in s t h e c o m p a n a n d h e r m a n a g e r re q u e s ts S A P a c c o u n t a c c e s fo r h e r.
2 . A u to m a te d r e q u e s t g o e s t o t h e r o le o w n e r fo r a p p r o v a l.
→ R e q u e s t n e e d s to b e a p p ro v e d b y th e m a n a g e r f ir s t .
↓
3 r s c o u w
w w w .o J A Y o .c o m
. R e q u e s t is e v ie w e d b y e c u r it y f o r o m p le te n e s s n c o n f ir m a t io s e r g e ts c r e a it h t h e r ig h t r
a n d n
te d , o le s
1 2 3
A c c e s s e n f o r c e r r e q u e s t v i e w
w w w .o J A Y o .c o m
1 2 4
A c c e s s e n f o r c e r r e q u e s t d e t a i l s
w w w .o J A Y o .c o m
1 2 5
A c c e s s e n f o r c e r m o d u l e s • •
• •
R e q u e s to r : E n d u s e r s c a n r e q u e s t a c c e s s to S A P a n d n o n S A P s y s t e m . T h is a c c e s s is g e n e r a lly a v a ila b le fo r a ll. A p p ro v e rs : A p p ro v e rs a p p ro v e th e re q u e s t o n c e th e y r e c e iv e it fr o m r e q u e s t o r s . H e r e th e r e a r e tw o ty p e s o f a p p r o v e r s . 1 .) R o le a p p r o v e r s 2 .) S e c u r ity a d m in is t r a to r a p p r o v e r s . In fo r m e r : T h e r e p o r tin g c o c k p it is r e p r e s e n te d b y in fo r m e r . T h is m o d u le c a n b e u s e d b y t e a m s lik e a u d it, c o m p lia n c e , h e lp d e s k t o m o n ito r th e r e q u e s t s . C o n fig u r a tio n : T h is is A d m in is t r a to r s c o c k p it fo r c o n fig u r a tio n o f w o r k f lo w s , c o n n e c to r s , a n d o th e r a ttr ib u te s fo r m a n a g in g th is to o l.
w w w .o J A Y o .c o m
1 2 6
A c c e s s m a n a g e r a d m i n . c o c k p i t
w w w .o J A Y o .c o m
1 2 7
w w w .o J A Y o .c o m
1 2 8
S t a n d a r d A p p r o v e r s in C U P T h re e le in G R C a p p r o v e b a s e d o r e q u ir e m
v e ls o f C U P . A rs c a n n y o u r e n ts .
a p p r o v a ls d d it io n a l w b e a d d e d /s o r g a n iz a t io
a re o rk u b s n
s ta n d a rd flo w s tra c te d
1 .
M a n a g e r - M a n a g e r is u s u a lly th e r e q u e s t o r 's s u p e r io r .
2 .
R o le o w n e r - R o le o w n e r s a r e s e n t a p p r o v a l r e q u e s t s t o g e t t h e ir b u y in f o r r o le a s s ig n m e n t s .
3 .
S e c u b e d a to h a p ro c e b le s s a s s ig
r it y n g v e s s in g n e
e s . d
- T o o m u c h a u t o m a t io n c a n r o u s h e n c e its a lw a y s g o o d o m e o n e w a t c h in g th e w h o le S e c u r ity p r o v id e s t h e fin a l b e fo r e r o le g e ts a u to - to th e u s e rs .
w w w .o J A Y o .c o m
1 2 9
G R C
R A R
S P M
S te p s fo r d e m o
w w w .o J A Y o .c o m
1 3 0
S te p s : •
1 .) S U 0 1 C r e a t e d a U s e r a c c o u n t : F ir e f ig h t 0 1 w it h t y p e a s s e r v ic e , p a s s w o r d d e a c t iv a te d .
•
2 .) K ic k s t a r t fir e f ig h t e r t r a n s a c t io n .
•
3 . ) A s s ig n O w n e r : T h e p e r s o n w h o o w n s t h e f ir e f ig h t e r a c c o u n t . T h e p e r s o n w h o o w n s t h e r is k a n d r e s p o n s ib ilit y f o r t h a t e m e r g e n c y a c c o u n t .
•
4 a s c
•
5 .) A s s ig n f ir e f ig h t e r a c c o u n t t o u s e r a c c o u n t S u p p o r t = T h e s u p p o r t u s e r w h o w ill u s e t h e f ir e f ig h t e r a c c o u n t t o s u p p o r t b u s i n e s s a c t iv i t e s , t r o u b le s h o o t in g w o r k o r p r o je c t s u p p o r t .
.) A c t iv a m a n
s s ig it ie s e p e d e le
n C o n tro u s a g e o r s o n in a g a te th e
lle r : T f f ir e f ig s m a ll re s p o n
h e h te o rg s ib
p e rs r a c a n iz ilit y
o n c o u a tio o f c
w h o g e ts n t. O w n e n . In a la o n t r o lle r
w w w .o J A Y o .c o m
c o m m r a n d rg e r o to a n o
u n c o n rg a th e
ic a tro n iz r p
te d lle r a tio e rs o
a b o u t c a n b e th e n th e o w n e r n .
1 3 1
G R C
S P M /F ir e fig h te r 5 .3
In tr o d u c tio n
w w w .o J A Y o .c o m
1 3 2
T h e n e e d fo r e m e rg e n c y a c c e s s •
A n e m e r g e n c y e le v a te d a c c e s s m a y b e n e e d e d in fo llo w in g s itu a tio n s – a c c
A c c e s s in g c r itic a l n d c r itic a l b u s in e s lie n ts , M o d if y n u m u s to m ta b le , c h a n
f u n c t io n s fu n c t io b e r ra n g g e a m in
s in n s . e s , o r c
S a p w F o r e x c h a n g o n fig u
h ic h a m p e e n r a tio
a r e s e n s itiv e le o p e n /c lo s e tr ie s in a n in S P R O .
– S u p p o r t i n g a p r o j e c t g o l i v e / c u t o v e r p r o c e s s . – T r o u b l e s h o o t i n g a n i s s u e i n p r o d u c t i o n s y s t e m .
w w w .o J A Y o .c o m
1 3 3
L ife b e fo r e S P M . •
T h e o in v o lv p r o file s im ila a p p ro
ld m e th o d o f p r o e d d ir e c t ly a s s ig to u s e r lik e S A P r. T h e re w e re m a c h :
v id in n in g _ A L u ltip
g e a v L o le p
le v a te d e ry p o w r s o m e r o b le m
a c c e s s e rfu l S A P th in g s w ith th is
–
A h u g e a u d i t r e d f l a g d u e t o l a c k o f p r o c e s s v i s i b i l i t y .
–
I t w a s d if f ic u lt t o o b t a in d e t a il u s e r a c t iv it y lo g .
–
T h e a c t i v i t y l o g h a d t o b e m a n u a l l y g e n e r a t e d .
–
L o g h a d t o b e m a n u a l l y s e n t t o t h e c o n t r o l l e r o f t h e F f i d .
–
P o s s ib ilit y o f m a n u a l e r r o r a s lo t o f p r o c e s s e s h a d u s e r t a s k s .
–
L a c k o f a u t o m a t io n a n d h e n c e m o r e c h a n c e s o f c a u s in g f in a n c ia l ir r e g u la r it y o r d e s t a b iliz in g b u s in e s s f u n c t io n .
–
A s s ig n in g S A P _ k i n g d o m . G i v i w n wg w a s a r is k b y it s
A L L w a s lik e g iv in g u s e r t h e k e y s o f t h e w s . o o J m A Y u co .h c o p m r o c e s s p o w e r t o a s i n g l e u s e r e lf.
1 3 4
S A P G R C
S P M
a d v a n ta g e s
•
E le v a t e d e m e r g e n c y a c c e s s b u t s till m o d u le w is e r e s t r ic t e d a c c e s s . M u c h m o r e lim ite d c o m p a r e d to S A P _ A L L .
•
D e ta ile d lo g a b ility w ith fie ld a c tiv ity a n d v a lu e v is ib ility in lo g s .
•
E n h a n c e d A u to m a tio n in t h e o v e r a ll p r o c e s s .
•
O n d e m a n d a v a ila b ility o f fir e fig h te r lo g .
•
W o r k flo w
fo r lo g a p p r o v a l p r o c e s s .
w w w .o J A Y o .c o m
1 3 5
E n titie s in v o lv e d in S P M
p ro c e s s
•
U s e r
•
R e q u e s to r
•
O w n e r
•
C o n tr o lle r
•
S P M
a d m in is tr a to r
•
S P M
T e c h n ic a l c o n s u lt a n t
w w w .o J A Y o .c o m
1 3 6
S P M
•
• •
•
p ro c e s s
T h e r e a r e v a r io u s s c e n a r io s w h e n S P M is u s e d lik e d is c u s s e d p r e v io u s ly b u t le t u s c o n s id e r tr o u b le s h o o tin g s c e n a r io . T h e r e is a p r o b le m in S A P p r o d u c tio n a n d fu n c tio n a l c o n s u lta n t n e e d s to u s e th e S P M . A r e q u e s t is m a d e u s in g th e o r g a n iz a tio n tic k e ttin g s y s t e m fo r a s s ig n in g th e fir e fig h te r to th e fu n c tio n a l c o n s u lta n t. S o m e o n e e ls e c a n r e q u e s t S P M fo r s o m e o n e e ls e ’s u s e . T h e S A P s e c u r ity te a m h a n d lin g S P M a s s ig n m e n t s r e c e iv e s t h e r e q u e s t . S e e k s o u t a n a p p r o v a l fr o m th e r e s p e c tiv e s p m o w n e r . O n c e a p p r o v a l is r e c e iv e d , S P M g e t s a s s ig n e d f o r t h e s p e c if ic p e r io d . T h e S P M a s s ig n e e is in fo r m e d . w w w .o J A Y o .c o m
1 3 7
•
F u n c t io n a l c o n s u lt a n t lo g s in to S A P . T o k ic k s t a r t S P M h e g o e s t o tr a n s a c tio n /n /v ir s a /v fa t. C lic k s o n lo g o n b u tto n to s ta r t th e S P M s e s s io n .
•
H e c o m p le t e s t h e tr o u b le s h o o t in g ta s k .
•
T h e th e c o n c o m
•
T h e a p p r o v e r r e v ie w s t h e a c t iv ity lo g a tta c h e d w ith th e s e c o n d e m a il a n d a p p r o v e s t h e s a m e w ith t h e ir c o m m e n ts .
•
T h i s f o r m s t h e e v id e n c e o f r e v ie w
re a re u s e r lo tr o lle r . p le te s
tw g T h
o a s o n h e s is S
le , e P
r ts a n c o M
w h ic h a u to m n d e m s e s s io
c a n b e c o n fig u r e d . O n c e w h e n a te d e m a il g e ts f ir e d to th e a il g e ts fir e d a fte r th e u s e r n .
w w w .o J A Y o .c o m
b y S P M
o w n e r .
1 3 8
S P M
e n tity & p r o c e s s
F o w r
i r e f i g h t e rr : U s e r s r g a n iz a t io n . S u d h e r e t h e y n e e d e q u ee s t e m e r g e n
h a s l i m i t e d a c c e s s a s p e r t h e ii r r o l e s i n t h e d e n l y t h e y c o m e a c r o s s a b u s in e s s p r o b l e m e l e v a tt e d a c c e s s t o r e s o l v e t h e i s s u e . T h e y c y a c c e s s
F s f t
F o w n e r :T h e F ir e f ig h t e r re q u e s t is r e c e iv e d b y e c u r it y t e a m w h o t h e n r e q u e s t s a p p r o v a l f r o m ir e f ig h t e r o w n e r . f ir e f ig h t e r o w n e r th e n p r o v id e s h e ir a p p r o v a l.
S e c u r it y A d m in :o n r e c e ip t o f a p p r o v a l, S e c u r it y a d m in a s s ig n s t h e f i r e f i g h t e r t o t h e f i r e f i g h t e r u s e r . F t p s
ir e f ig h r o u b le r o b le m y s te m
te r s h o . A fro
:T h e u o t th e fte r re m f ir e f
s e r th a n is s u e a n s o lu t io n ig h t e r s e
u s e s d re s , th e s s io n
t h e f ir e f ig h t e r id t o o l v e s t h e b u s in e s s u s e r lo g s o u t o f t h e .
F F o w n e r : F ir e f ig h t e r o w n e r g e t s a lo g o f f ir e f ig h t e r 's a c t iv i t y . r e v i e w s t h e s a m e a n d p r o v i d e s h e r r e v ie w a p p r o v a l t o c lo s e t h e c y c le . w w w .o J A Y o .c o m
1 3 9
S P M
e n tity & p r o c e s s
O w n e r : I n d iv i d u a l w h o is f in a l ly r e s p o n s ib le f o r t h a t a r e a . w h o o w n s t h e r is k f o r t h a t p a r t ic u l a r p r o c e s s
C o n t r o lle r s : T h e y g e t c o m m u n ic a t e d w it h u s e r lo g in a n d lo g a c t iv i t y .
M a n y a t im e s t h e o w n e r a n d c o n t r o lle r a r e c o m m o n .
w w w .o J A Y o .c o m
1 4 0
S P M
c o c k p it
w w w .o J A Y o .c o m
1 4 1
F ir e fig h te r 1 : /n /v ir s a /v fa t •
T r a n s a c tio n to k ic k s ta r t fir e fig h te r s e s s io n fo r b o th fir e fig h te r a n d fir e fig h te r a d m in is tr a to r is
•
/n / V ir s a / V F A T
w w w .o J A Y o .c o m
1 4 2
F ir e f ig h te r 2 : L o g o n t o S A P S P M
w w w .o J A Y o .c o m
c o c k p it
1 4 3
F ir e f ig h te r 3 : R e a s o n c o d e ( D o c u m e n t R e a s o n a n d A c t iv ity )
w w w .o J A Y o .c o m
1 4 4
F ir e fig h te r 4 : C o m p le te a c tiv ity
w w w .o J A Y o .c o m
1 4 5
C o n tr o lle r g e ts th e lo g
w w w .o J A Y o .c o m
1 4 6
F ir e f ig h te r a d m in - lo g g e n e r a tio n o n d e m a n d
w w w .o J A Y o .c o m
1 4 7
G R C
im p le m e n ta tio n s te p s
w w w .o J A Y o .c o m
1 4 8
•
R is k id e n tific a tio n a n d a s s e s s m e n t
•
P la n n in g f o r im p le m e n ta tio n
•
u p g r a d e r e q u ir e m e n ts a n a ly s is
•
T e s tin g
•
C o n fig u r a tio n
•
G o liv e w w w .o J A Y o .c o m
1 4 9
G R C
E R M
R o le m a n a g e m e n t c h a lle n g e s •
A d m in is t r a tio n o f S A P r o le s is a te d io u s ta s k a n d in v o lv e s a lo t o f m a n u a l a c tiv itie s .
•
T r a n s p o r tin g r o le s th r o u g h la n d s c a p e s
•
In c lu s io n o f r ig h t tr a n s a c tio n s a n d a u th o r iz a tio n o b je c t s in b u ilt r o le s .
•
R o le o w n e r la c k s v is ib ility in to r o le c h a n g e s h e a u th o r iz e d .
•
L a c k o f a u d it tr a il a s to w h a t c h a n g e s a r e m o v in g in to p r o d u c tio n .
w w w .o J A Y o .c o m
1 5 1
C o n v e n tio n a l r o le b u ild c y c le • • • • • • • • • •
N T C u C M T B A T R m o V p
e w r o le b u ild /m o d ify r e q u e s t r e c e iv e d . a k e a p p r o v a l fr o m r o le o w n e r in e m a il. M a n u a l s te p . h e c k if th e c h a n g e w ill c a u s e a n y s o x is s u e s fo r th e r o le o r s e r s . M a n u a l s te p . o o r d in a te w ith th e r o le o w n e r if th e r e a r e a n y s o x is s u e s . a n u a l s te p . ie u p th e r o le m o d ific a tio n , c r e a tio n to a tic k e t. M a n u a l s t e p u ild th e r o le in d e v e lo p m e n t. tta c h p r o o f o f u n it te s t / fu n c t io n a l te s t in d e v . M a n u a l. r a n s p o r t th e c h a n g e to te s t s y s te m e p r e s e n t th e c h a n g e in c h a n g e m a n a g e m e n t . E x tr a c t a n d a in ta in d a ta m a n u a lly to p r e s e n t th e c h a n g e . n c e a p p r o v e d , t h e r o le g e ts tr a n s p o r te d to p r o d u c tio n . a lid a te w ith th e u s e r th a t th e c h a n g e a c c u r a te ly r e fle c t s in r o d u c tio n . M a n u a l w w w .o J A Y o .c o m
1 5 2
•
T h a n k s to G R C E R M to o l – a ll th e s e a c tiv itie s c a n b e w e ll o r c h e s tr a t e d u s in g G R C E R M .
•
A b u lk o f m a n u a l s te p s c a n e ith e r b e a u to m a te d o r e lim in a te d c o m p le te ly u s in g th e w e ll in te g r a te d to o l E R M .
•
A d d itio n a lly t o o l e lim in a te s m a n u a l e r r o r a n d b r in g s in b u ilt- in b e s t p r a c tic e s .
•
R o b u s t a u d it lo g s to tr a c k c h a n g e s
•
M a in ta in s y s t e m s w ith e a s e a n d n o t u n s ta b le m a n u a l m o d e a t a ll tim e s
•
A u t o m a t e r is k a s s e s s m e n ts w w w .o J A Y o .c o m
1 5 3
1 . D e fin e R o le •
S e le c t s y s t e m , r o le ty p e , r e la te d b u s in e s s p r o c e s s , s u b p r o c e s s , p r o je c t r e le a s e .
•
E n te r r o le n a m e , b r ie f, p r o file , d e s c r ip tio n .
w w w .o J A Y o .c o m
1 5 4
•
P r o v id e d e ta il d e s c r ip tio n a b o u t a c tiv itie s in v o lv e d in th e r o le a s s h o w n b e lo w .
•
P r im a r y fu n c tio n a r e a
•
S e le c t th e r ig h t p r im a r y &
•
In c lu d e a n y c u s t o m a ttr ib u te s / c u s t o m iz a tio n if n e e d e d .
a lte r n a te a p p r o v e r s
w w w .o J A Y o .c o m
1 5 5
In c lu s io n o f tr a n s a c tio n s : •
S e le c t io n o f a s p e c ific f u n c t io n fo r e x a m p le “ m a in ta in c u s to m e r ” a u to m a tic a lly p u lls in th e r e la t e d t r a n s a c t io n s a n d a u t h o r iz a t io n o b je c t s .
•
T h e F u n c t io n s e le c t e d is S O D fr e e a s it is p o p u la te d o u t o f c o m p lia n c e c a lib r a to r p r e - b u ilt fu n c tio n s e t. A v e r y e ffic ie n t a p p r o a c h .
•
M a n u a l in s e r t io n o f t r a n s a c t io n / a u t h . O b je c t s is a ls o s u p p o r te d .
w w w .o J A Y o .c o m
1 5 6
•
T r a n s a c tio n v ie w
w w w .o J A Y o .c o m
1 5 7
In c lu d e a u th o r iz a tio n s •
O n c e t h e r ig h t a u t h . O b je c t s a r e in c l u d e d , c l ic k o n o r g . le v e ls fo r in c lu s io n .
w w w .o J A Y o .c o m
1 5 8
In c lu d e o r g . v a lu e s
w w w .o J A Y o .c o m
1 5 9
D e r iv e d r o le s
•
A s s o c ia te d o r g . v a lu e s fo r th e r o le a r e a u to p o p u la te d .
•
E n te r th e v a lu e s o n w h ic h y o u w a n t to c o n tr o l th e d e r iv e d r o le s .
•
E n te r th e r o le n a m e s f o r e a c h d e r iv e d fla v o r .
•
O n c e w o r k is c o m p le te , a ll s a v e s o f w o r k a r e a c tiv a te d b y b a c k b u tto n in th is to o l.
•
T h e b u tto n is s itu a te d o n to p r ig h t o f th e s c r e e n . w w w .o J A Y o .c o m
1 6 0
A p p r o v a l s •
O n c e r o le is c o n s t r u c t e d w ith a ll n e c e s s a r y c h e c k s a n d o b je c t s , a p p r o v a l is s e n t t o t h e r o le o w n e r .
•
T h e w o r k flo w s b e in g u s e d a r e p a r t o f a c c e s s fo r c e r .
•
A p p r o v e r r e v ie w s a n d a d d s h is c o m m e n t s . N o a p p r o v a l is c o m p le te w ith o u t a p p r o v e r o b s e r v a tio n re m a rk s .
w w w .o J A Y o .c o m
1 6 1
S o x c h e c k •
T h is is t h e tim e w h e n r e v ie w e r a ls o c h e c k s f o r a n y S O D v io la tio n s .
w w w .o J A Y o .c o m
1 6 2
A d d r e v i e w
c o m m e n t s
•
C lic k o n a d d c o m m e n ts t o in c lu d e fin a l r e v ie w re m a rk s .
•
P r o v id e fin a l a p p r o v a l a n d lo g o u t.
w w w .o J A Y o .c o m
1 6 3
R o le g e n e r a tio n •
T h e r o le s c a n b e g e n e r a te d a u to m a tic a lly u s in g r o le e x p e r t fo r th e ta r g e t s y s te m .
•
T h e r o le s a r e n o w r e a d y f o r a s s ig n m e n t a n d u s a g e in th e ta r g e t s y s te m .
•
Y o u c a n v a lid a te th e s a m e b y lo g g in g o n to ta r g e t s y s te m a n d c h e c k in g th e r o le s t a tu s .
w w w .o J A Y o .c o m
1 6 4
D e lta fe a tu r e s o f G R C
r o le E x p e r t
•
R o le e x p e r t m a s s m a in te n a n c e :
•
It is p o s s ib le to m a k e m a s s c h a n g e s o n r o le s in r o le e x p e r t u n lik e P F C G .
•
C o n v e n t io n a l m e t h o d c u r r e n t ly is c u m b e r s o m e , te d io u s . R o le e x p e r t m a k e s it v e r y e a s y . R E g o e s in a n d m a k e s th e c h a n g e in a ll in d iv id u a l r o le s .
w w w .o J A Y o .c o m
1 6 5
G R C
1 0 .0
w w w .o J A Y o .c o m
1 6 6
w h a t is n e w •
in G R C
1 0 .0
T h e m a jo r c h a n g e s a r e a s f o llo w s . – M J o J m
o v a v a f re a v a a n
in g to p o r c o a e g
a w a y A B A P tin g . N m p o n e m e n
– G m c c
R C c o m a n a g e m o n tro l a n o n tro l g e
fro m v e r o m e n ts t n e
p o n e n e n t, A d p ro c ts in te
R is k
s io n o re a n d e d e d . A c c e s s c o n t r o l
ts R is k c c e s s e s s g r a te d .
w w w .o J A Y o .c o m
P ro c e s s c o n t r o l
1 6 7
•
A c c e s s c o n tr o l in c lu d e s fir e fig h te r a n d u s e r p r o v is io n in g c o m p o n e n ts .
•
A ls o b e c a u s e o f th e in te g r a tio n , e a c h o f th e to o l w o r k s e a m le s s ly in th e s t u d io .
•
S h a r e d in fo r m a tio n is c o m m o n fo r b u s in e s s p r o c e s s e s , c o n tr o ls in o r g a n iz a tio n s , w o r k flo w s .
•
P r o c e s s c o n tr o l b r in g s in a b ility to d o c u m e n t in te r n a l c o n tr o ls a n d m a n a g e r is k s b e tte r .
•
C e n tr a l in te r n a l c o n tr o l c a ta lo g u e n e e d s to b e c r e a te d o n c e a n d th a n s h a re d b e tw e e n a ll
w w w .o J A Y o .c o m
1 6 8
•
Im p a c t a n a ls is : R is k a n a ly s is f o r r o le n o w s h o w s p o s s ib le im p a c t fo r u s e r s . T h is is a n e n h a n c e m e n t
•
C ry s ta l re p o rt: In te g ra te d c r y s ta l r e p o r ts n o w e n h a n c e th e r e p o r tin g fu n c t io n a lit y .
•
M a s s m it ig a tio n f o r u s e r s / r o le is n o t p o s s ib le
•
U s e r a s s ig n m e n t n o w m im ic s c la s s ic S A P u s e r m a s t e r .
•
B u s in e s s u s e r s c a n n o w r e v ie w r o le s b e in g c r e a te d , m o d if ie d .
•
R o le a s s ig n m e n t s fo r u s e r c a n b e r e v ie w e d b y b u s in e s s o w n e r s a t a n y g iv e n p o in t .
w w w .o J A Y o .c o m
1 6 9
C o n c lu s io n
w w w .o J A Y o .c o m
1 7 0