What is the difference between ECC security and RAR security
when GRC (RAR<SPM<CUP) is used, when similar functionality can
be performed SAP R3 level(ECC)?

Answer Posted / itsgaurav151

The things ECC security and RAR security are different. ECC
is a system whereas RAR is a tool. ECC security involves
securitg data, t-code access, report access and maintaining
the suthorizations. RAR(Risk analysis and Remediation) is a
tool that is used for analysis of risk analysis and its
remeduation as name suggests. Rhis tool determines all
potential risks that arises if a t-code/object/role/auth is
assigned to a user. Also this tool helps to remediate that
risk using mitigation technique.

Is This Answer Correct ?    6 Yes 1 No



Post New Answer       View All Answers


Please Help Members By Posting Answers For Below Questions

What does the pfcg_time_dependency clean up?

797


List the various user types.

618


What are se10 t-codes used for?

689


What are se09 t-codes used for?

689


What are the most used tables in sap?

665






Giving fire call access and extending fire call access by using VIRSA’s VFAT tool? can u brief give the explanation

3037


what is use of copy data in derived role and when we use this one ???

1320


how we do CUA configuration in Quality system

1971


What is the use of su56?

686


What is the main purpose of parameters, groups & personalization tabs?

637


What profile versions?

791


What is the maximum number of profiles in a role and maximum number of object in a role?

617


What is t code?

682


How do we test security systems.

643


What are some ap security t codes?

659