Answer / krishna pradeep

SOX Defines Sarbanes Oxley Act

Its is the base for creating GRC In sap.

The main intention of this is to prevent the total access to a person or authority in an industry or organisation.
It is used to segregate the duties.

Ex: if a person having the authority for creating a PO(purchase order) and approving the PO and Transfer the Funds,he can do illegal activities by giving it to his own people.

Answer / naresh nelluri

sox is nothing but sarbines oxley act it is 404 act in us.
it specifies that single business transaction we cannot assign
single user to avoid malpractice nd misutilizatION if public
fund.
e.g.satyam scam,2G SPECTRUM,COMMONWELTH GAMES.

What are the mandatory authorization object should have like Reporting user ,power user ,super user and administrator user

2 Answers   IBM,

---

How we Assigning roles to users positions in HR, troubleshoot access issues

2 Answers   IBM,

---

what is the difference between se16 and se16n ?

4 Answers   IBM,

---

What is use Of SHDB (Transaction Recorder) ?

2 Answers   Patni,

---

What appears as the last sentence in sap note 587410? What does it men and how would you restrict it?

0 Answers  

---

how we Restrict the auth groups for table maintain, creating Auth group using SE54 to built new Auth groups to restrict tables via auth object S_TABU_DIS

0 Answers   IBM, SAP Labs,

---

how do we test security systems.what is the use of SU56

2 Answers   GE, IBM,

---

What authorization are required to create and maintain user master records?

0 Answers  

---

hi , can any one say what is the exact use of SNC TAB IN SU01,IF IT IS EXTERNAL SECURITY PURPOSE ,WHAT KIND OF SECURITY PURPOSE?

2 Answers  

---

What is the difference between c (check) and u (unmaintained)?

0 Answers  

---

i want to know how to list out the mass activities and mass organizational levels...

1 Answers  

---

what is role matrix

2 Answers   IBM,

---