segregation of duties

How to Validate Segregation of Duties Results

Reading time: 20 mins

Upon first running segregation of duties (SoD) reports in SAP BusinessObjects Access Control, management staff can become overloaded with data and assume that the results simply cannot be correct. It is then the responsibility of the owners of SAP BusinessObjects Access Control to prove that the reports are accurate. Step through the process that SAP…...…
Analyze Segregation of Duties in Legacy Systems with Compliance Calibrator

Reading time: 23 mins

Starting with Compliance Calibrator 5.1, and continuing with versions 5.2 and 5.3, you can connect Compliance Calibrator to non-SAP systems to perform Segregation of Duties analysis. See how to set up Compliance Calibrator to do this in six steps. Key Concept Compliance Calibrator is one of SAP’s solutions for GRC. It provides real-time controls compliance…...…
Audit-Ready Your Segregation of Duties Remediation Process with User Remediation in RAR

Reading time: 8 mins

Discover key tools and process steps to assist in the remediation of risks at the composite role and user level identified by SAP BusinessObjects Access Control Risk Analysis and Remediation. Key Concept The end-game of every segregation of duties review is to have a remediated risk environment. This involves remediating any existing composite roles, which…...…
Start Your Segregation of Duties Risk Mitigation Smart — at the Single Role Level

Reading time: 12 mins

Discover key tools and process steps that assist in the remediation of risks identified at the single role level by SAP BusinessObjects Access Control Risk Analysis and Remediation. Key Concept Risk Analysis and Remediation (RAR) is part of SAP BusinessObjects Access Control. This capability helps all key stakeholders work in a collaborative manner to achieve…...…
- SAP GRC
Why Everyone’s Segregation of Duties Reports are Wrong

Even without the COVID-19 pandemic, all organizations need to be as efficient as possible when managing Segregation of Duties (SoD) conflicts. SoD reports are flawed and drive inefficiencies in business processes. The flaws also cause organizations to cut corners and limit their visibility to SoD conflicts. By recognizing the issues with your SoD reports, you…
- SAP CyberSecurity
Risk Assessment in SAP Against a Cybersecurity Framework

Reading time: 4 mins

In part two of the three-part series “Becoming CMMC or NIST Compliant and How to Prove It,” SAPinsider expert Julie Hallett demonstrates for readers how they can assess cybersecurity threats against a cybersecurity framework. In order to effectively evaluate all of the cybersecurity threats and vulnerabilities that a company has, they must first apply a…
Indirect Assignment of Authorizations in SAP ERP HCM

Reading time: 16 mins

Learn how to implement position-based authorizations in your organization. Discover the advantages and pitfalls of having position-based authorizations. Key Concept The SAP general authorizations assignment concept is divided into two types: the direct assignment type, in which the user ID is directly assigned to a role, and the indirect assignment type, in which the user…...…
- SAP System Administration
Ensuring SoD Library Quality

Reading time: 14 mins

Learn how to get the SAP user and approver community truly involved in reviewing segregation of duties (SoD) risk rules. Key Concept Companies using SAP BusinessObjects Access Control are ultimately responsible for the thoroughness of their segregation of duties (SoD) library, even though SAP delivers a baseline ruleset (see SAP Note 986996 [GRC Access Control…...…
Define Risks and Functions with Risk Analysis and Remediation Rule Architect

Reading time: 14 mins

Discover the makeup and functionality of Rule Architect within SAP BusinessObjects Access Control Risk Analysis and Remediation. Key Concept Risk Analysis and Remediation (RAR) is part of SAP BusinessObjects Access Control. This capability helps all key stakeholders work in a collaborative manner to achieve ongoing segregation of duties (SoD) and audit compliance at all levels…....…
Designing Effective Mitigating Control

Reading time: 10 mins

Because mitigations are normally detective controls, it’s very important that they are designed in a way to maximize their effectiveness. Learn the key concepts for designing, documenting, implementing, testing, and monitoring an effective mitigating control. In addition, examples show how you can use SAP BusinessObjects Access Control risk analysis and remediation to help document and…...…