Answer / gopi

Post Sarbanes Oxley, focus for corporations is more on compliance and security. Sarbanes Oxley has had a major impact on the organizations using SAP R/3 as their ERP. Some of the changes seen in the corporate landsacpe include identifying and documenting processes, implementing controls and safeguards, documenting user access approvals etc. In short, there has been a cultural shift in organizations post Sarbanes Oxley. Below, I have listed 7 major pointers which can help organizations towards better SAP security in the Sarbanes Oxley Era.

1. Provide users access on a need to know and need to do basis.
2. Adequately secure programs, transactions and tables.
3. All user accesses to SAP R/3 are properly authorized and approved.
4. Segregation of duties is maintained for all sensitive business transactions
5. All controls and business processes are documented.
6. Anti-fraud preventive controls are in place to prevent & detect fraud before an audit.
7. User profiles and roles in SAP are secured and designed to meet business requirements.

Answer / praveen

Sarbanes Oxley, focus for corporations is more on compliance and security. Sarbanes Oxley has had a major impact on the organizations using SAP R/3 as their ERP. Some of the changes seen in the corporate landsacpe include identifying and documenting processes, implementing controls and safeguards, documenting user access approvals etc. In short, there has been a cultural shift in organizations post Sarbanes Oxley. Below, I have listed 7 major pointers which can help organizations towards better SAP security in the Sarbanes Oxley Era.

This is in continuataion to the previous question. a user is assigned with tcode SA38.how to restrict him to execute only a few reports,say rsusr003.If you're going to modify the role(having sa38) assigned to the user,that will affect other users also because that role might be assigned to multiple users.I don' want that to happen.so what is the solution?

5 Answers   iGate,

---

how can we get the email address for multiple users at a time.

3 Answers   Tech Mahindra,

---

if user enters a tcode how the system knows what action should be done ?

3 Answers   Deloitte, Pranav Systtech,

---

what is the use of start menu in defaults tab in su01 screen

2 Answers   CG,

---

What is a niche profile in SAP ?

2 Answers  

---

why we are assigining only 312 profiles to the user

1 Answers   CTC, SAP Labs,

---

two company codes ex 1001,1002 and two users ,one user need to access both company codes and another user need to access only one company code need to access by giving same role (one role ) to both of them.how can give access or restrict company codes in one role?

2 Answers   IBM,

---

What is the latest change that was done to the SU53 trace, which is used to find the last authorization failure in SAP..???

4 Answers   IBM, Tech Mahindra,

---

What appears as the last sentence in sap note 587410? What does it men and how would you restrict it?

0 Answers  

---

While run the risk analysis fir two user & its showing blank screen and other users its working fine , whats the reason?

5 Answers   TCS,

---

How to know the total no. of users in particular plant in sap?

1 Answers  

---

After maintaining authorization fields, we save and generate the profile. But it prompts for the profile name right when we click on 'Save' icon. So what is the basic difference between Saving and Profile Generating?

9 Answers  

---