SAP BASIS AND SECURITY TUTORIAL

What is SAP Security and Why it is important SAP software is used by many organizations as their business application, so the data pertaining to SAP should be protected from unauthorized access within the organization and outside of the organization. The system should be monitored and protected. SAP Security is all about securing the code which includes securing custom code and SAP code. Server configuration, secure login, system communication, data security, authorizations and users security are essential to secure. At the same time it is required to maintain the system compliance by monitoring the system, performing timely audits, and creating emergency plans. SAP Security is important in protecting the systems from cyber threats. This way one can maintain the integrity, confidentiality and availability of the system. The most common use cases are data leak detection, periodic audits, central system monitoring, and finding unauthorized access. Any attack on the SAP system can cause a...

 SAP GRC Access Controls Questions and Answers 1. What is SAP GRC? Governance, Risk and Compliance id the full form of GRC. It provides a solution that enables organizations to maintain regulations and compliance and remove any risks in maintaining organizations key operations. 2. How many modules present in GRC? a. Access Control (AC) b. Process Control (PC) c. Risk Management (RM) d. Environment, Health and Safety (EHS) e. Global Trade Services (GTS) 3. What is the software of GRC Financial compliance? GRCFND_A 4. What is the plugin used for HR backend? GRCPIERP – Used for HR function 5. What is the plugin used for NHR backend? GRCPINW – Used for Non-HR functions 6. What is the periodic process that allows role owner to remove roles from the users? UAR Review 7. Where can you define a mitigating control? a. Mitigating controls workset in Access Control b. Access Control risk analysis result screen c. Central process hierarchy in process control 8. What is the process of  imp...

  SAP GRC Access Controls 12.0 Emergency Access Management (EAM) SAP GRC Access Control enables organizations to control access, prevent fraud and minimize the time and cost of compliance. The Emergency Access Management (EAM) is one of the module in GRC Access Control. It is implemented in the organizations for managing emergency access. With the EAM, user can request for the emergency access to systems and applications. Role owners/Business process owners can review and approve the emergency access. Security audit can be performed and logs can be monitored with the EAM module. Below are the IDs required for implementing the EAM a. Firefighter: User who require the emergency access b. Firefighter ID: User ID with the emergency/additional access c. Firefighter Owner: User ID responsible for Firefighter ID and assignment for Firefighters and Controllers. d. Firefighter Controller: User ID responsible for reviewing and approving the log files created from firefighting activities. ...

 SAP BASIS: Administration and Monitoring Tools SAP System provides various tools for monitoring the system and for making administration changes. The tools can be accessed from SAP menu by selecting Administration-->System Administration, then under nodes Administration and Monitor. The monitoring tools can also be directly executed using the transaction codes. 1. Consistency Check SICK:   Transaction code SICK is executed immediately after the installation to get the information about any inconsistencies in the SAP installation process. It crosschecks the release numbers and character sets in SAP Kernel with the database release numbers. 2. SAP Application Server Overview SM51:   It displays all the application server instances of the SAP system. This transaction code is used to monitor application servers and change their states (Initial, Started, Active, Shutdown and Stop). 3. Monitoring ABAP Work processes SM50:   It displays the activity of work process...

 SAP Security Overview This content provides an overview of  SAP Security concepts which is intended for SAP Security Administrators or SAP User Administrators.  1. Security SAP systems and Clients: SAP Security Administration is based on the systems and clients. In general there are 3 systems used to support the process. Those systems are Development, Quality/Integration and Production. This is also called as Three System Landscape. Apart from these systems, some companies might setup Training and Sandbox systems depending on the requirements. Clients are created with in the systems and client number may vary with in the system. Security Administrator has to take consideration of system and client structure while defining the system requirements as well as client specific security requirements. Client specific security setting may vary with in the same system. Basis team is responsible for creation and maintenance of client. They will take the ownership and will be ...