Answer / gopi

Post Sarbanes Oxley, focus for corporations is more on compliance and security. Sarbanes Oxley has had a major impact on the organizations using SAP R/3 as their ERP. Some of the changes seen in the corporate landsacpe include identifying and documenting processes, implementing controls and safeguards, documenting user access approvals etc. In short, there has been a cultural shift in organizations post Sarbanes Oxley. Below, I have listed 7 major pointers which can help organizations towards better SAP security in the Sarbanes Oxley Era.

1. Provide users access on a need to know and need to do basis.
2. Adequately secure programs, transactions and tables.
3. All user accesses to SAP R/3 are properly authorized and approved.
4. Segregation of duties is maintained for all sensitive business transactions
5. All controls and business processes are documented.
6. Anti-fraud preventive controls are in place to prevent & detect fraud before an audit.
7. User profiles and roles in SAP are secured and designed to meet business requirements.

Answer / praveen

Sarbanes Oxley, focus for corporations is more on compliance and security. Sarbanes Oxley has had a major impact on the organizations using SAP R/3 as their ERP. Some of the changes seen in the corporate landsacpe include identifying and documenting processes, implementing controls and safeguards, documenting user access approvals etc. In short, there has been a cultural shift in organizations post Sarbanes Oxley. Below, I have listed 7 major pointers which can help organizations towards better SAP security in the Sarbanes Oxley Era.

what is centralized n decentralized

3 Answers   IBM,

---

how we Set up profile parameters and security Audit log activation

3 Answers   IBM,

---

why we are using the landscape in sap r/3 ?

4 Answers   HP,

---

When would you update a sap table directly?

0 Answers  

---

what is the difference between adding tcode in menu and adding tcode using s_tcode ?

3 Answers   Pepsi, Tech Mahindra,

---

how to adjust user master records?

6 Answers   Accenture,

---

What is Sap security t-codes?

0 Answers  

---

Explain snc in sap security?

0 Answers  

---

How to add a new tcode to 1000 roles at a time?

2 Answers   Cap Gemini, Tech Mahindra,

---

Which request is this Which we create for transportation?

2 Answers   IBM,

---

What is difference between user master record and user buffer

1 Answers   IBM,

---

List the various user types.

0 Answers  

---