Answer / reddy

What is GRC ?

Governance, Risk, and Compliance.

The goal of GRC is to help a company efficiently put
policies and controls in place to address all its
compliance obligations while at the same time gathering
information that helps proactively run the business.

This means Ethical Business Process should comply with
Effective Process controls as per the related industry
Business Process and accounting Process and Govt Policy .

This GRC process finally Can Conculded with respect to Govt
Orgasnisations and Public Orgaanisation which are
Registered in Local Stock Markets are accountable to have
Effective Governance and Process Controls to Protect the
Share holder rights and Prevent Organised Corporate Fruads
and scams.

GRC Tools and IT applications

There are many GRC AUDIT tools in the Market to Facilitate
Internal and External Audit of the Companies .

What is SAP VIRSA Tool.

focused on 1) Access controls , 2) Process Controls.

It Has 4 Sections to Audit the system.

1. Compliance Caliberator
2. Role Expert
3. Firefighter
4. Access enforcer .

VIRSA systems is now takenover by SAP AG.

It has been aprt of Netwever and add on now .

Answer / gurugobinda

The above answer is partially Correct. But not entirely.

Virsa Was the the intial developer of the tool(in fact it
is a suite instead: combination of 4 tightly integrated
tools) and after taken oer by SAP AG in 2006, it has been
renamed as: SAP BO GRC Access Control. The tool is in a
continious deveopment track to improve its performance,
scalability and reliabilty. The current Version(5.3)is
built on SAP Netweaver Platform and Works purely on Java
stack. The 4 different tools of the AC suite have been
developed using java Webdynpro and .asp. Process Control is
not a part of Old virsa suite. It's rather a SAP product.
When GRC Access Control conecentrates more on IT and Acess
control, a it's name denotes, Process Control(PC) and Risk
Management(RM)is more on Financial Planning and Risk
Management.

Thanks,
Gurugobinda

Answer / the gimp

VIRSA produced a number of tools, most commonly used was
Compliance Calibrator.
SAP acquired VIRSA and integrated their tools into it's GRC
suite of products which have a wider span than the VIRSA
products.

You can use the VIRSA tools in ECC6. As the company no
longer sells these products it is an easy way to tell if a
candidate does not understand the GRC topic by them
referring to when they mean SAP GRC.

GRC as a subject has been hijacked by SAP's use of the term,
real GRC is much wider than a set of tools which can
automate part of the GRC process

Answer / i.javith nishar

Yes

Answer / raj

Hi Gurugobinda,

Just wanted to know whether this GRS tool will come as Add
on or customer has to buy it separetely, if its need to buy
is too costly, because we are planning to propose our
client to implement GRS tool for user creation automation.
So if its coming as an addon or cost effective means we can
propose it to client

Regards,
Raj

In an environment of derived roles ; a user is asking for a t-code ; which is not found in suim in search of roles ? what will u do ?

4 Answers   IBM,

---

what is SOD?

3 Answers   IBM,

---

Hi Everyone, can anyone suggest the best institute in Ameerpet, HYD for SAP Security Course. Thnks Ankur

10 Answers  

---

If we delete a Role can we transport it, if yes then how?

1 Answers   IBM,

---

What does SAP recommend regarding the RFC naming convention?

3 Answers   TCS,

---

---

What is the difference between ECC security and RAR security when GRC (RAR<SPM<CUP) is used, when similar functionality can be performed SAP R3 level(ECC)?

2 Answers   ADP, Baidu,

---

which role is commonly used

3 Answers   IBM,

---

what is the main difference between the derived role and a single role?

0 Answers  

---

Difference between Change Mode and Expert Mode in PFCG?

1 Answers   IBM, L&T,

---

hOW many users limit in su10

3 Answers   Accenture, Cap Gemini, Hexaware,

---

Q3) What is difference between R/3 security and HR security? Explain in detail or its importance?

2 Answers   HP,

---

How we Check if the PFCG_TIME_DEPENDENCY is running for user master reconciliations.

1 Answers   IBM,

---