SAP - TINET - Tarragona Internet

Getting Clean ................................................................................................ So proliferation ...

We once heard an anecdote of an access control consultant who would visit a company and talk to its IT department about roles. H ...

If you think that it sounds like line of business managers should take the lead here, you’re correct. They need consultation and ...

they are executed across the system landscape. Compared with correlating multiple usernames and passwords from different systems ...

The SAP Approach: SAP GRC Access Control .......................................... Like many of the dilemmas in GRC, automation ...

certain emergency transactions, but everything that user does in the system is logged in a report for scrutiny. The temporary ID ...

Chapter 7 Taking Steps toward Better Internal Controls In This Chapter
Obtaining better internal controls
Discovering the adva ...

urgently calls for a swift segregation of duties to mitigate risk. However, the business process owner may believe that there is ...

Benefit one: Business process improvement.................................. One byproduct of implementing strong internal contro ...

a sample of transactions and tracing them through a process, while giving special attention to the checkpoints, and looking for ...

Benefit four: Mindset changes .......................................................... Implementing automated controls require ...

that could be automated. After processes were automated, companies needed to automate their checks too, and so automated interna ...

Embedded into core systems:When compliance is embedded rather than bolted on, it enforces policies at the point of access and t ...

Taking Five Steps to Better Internal Controls........................................... The evolution and automation of interna ...

Testing: Real-time and historical ...................................................... After the documentation phase, companie ...

President) runs reports: what controls have run recently, how many failed, and which business processes are most at risk. The mo ...

a company. SAP GRC Process Control leverages all this information and links it to security frameworks like COSO and COBIT and le ...

place because they don’t have to create them from scratch. SAP GRC Process Control delivers automated controls monitoring for th ...

Of course, some controls require human intervention. SAP GRC Process Control supports manual control activities with smooth, wor ...

140 Part II: Diving into GRC ...