SAP GRC AC - frequently asked questions
Our consultants have put together a comprehensive list of common enquiries and responses to SAP security issues to help with basic troubleshooting and simple problem solving. The FAQs also provide useful background data to IT administrators about to start an SAP initiative.
If you have a question which is not listed here, please use the Ask the Experts form to submit a question. Your inquiry will be addressed by one of our consultants as promptly as possible.
Should we use our own SOD rules or take the standard Rules provided by the Risk Analysis and Remediation tool?
There are good reasons to go either route, though we would generally advise on taking the standard rules as the starting point.
- Dependent on what the timescales / objectives are – limited or for continuous compliance.
- Always recommended to customise standard Ruleset to your business environment.
To discuss this in more detail please get in touch, and we can either assist your team in preparing a Rules management plan or just provide some simple pointers.
