Is SAP GRC about security and user provisioning

 GRC has its roots in the space of providing and managing user access within an SAP environment. This includes role provisioning and the whole processes of managing movers, joiners and leavers. know more sap grc online training

But despite these origins, GRC has evolved to solve a broader business problem.

Managing Risk (and Cyber Security) in SAP

GRC tools also provide a critical insight into who’s doing what, when and where.  They highlight risks which could lead to financial fraud - Segregation of Duties breaches, access to sensitive transactions, ineffective controls and Cyber Security threats - given that the average organisation loses 5% of its revenues to financial fraud (estimated to be $4 trillion per annum globally and increasing) it’s a crucial process to be on-top of.

The trouble is, SAP’s GRC tool is designed for very large organisations and it simply too complex and expensive for most SAP customers

The alternative to SAP GRC

ProfileTailor Dynamics provides a low-cost and functionality rich alternative to SAP GRC.  It covers all of the standard GRC 10 functionality and offers a number of additional features not available in the standard SAP product, including a web based user interface which is intuitive and easy to use.know more sap grc online training
 
What’s more, ProfileTailor Dynamics is fast to implement and doesn’t require specialist SAP GRC resources (or managed services) to operate.

ProfileTailor Dynamics uses AI, Machine Learning and Predictive Analytics to provide continuous controls monitoring, identifying specific security threats based on individual user behaviour profiles. It continually monitors and records the real-time activity of every SAP user and provides automatic alerts if an activity, or combination of activities, violates defined business rules.know more sap grc online training

As well as comparing a user's behaviour against their own 'typical' behaviour,  ProfileTailor Dynamics also compares their behaviour against others from their department or against others with equivalent roles within their department.know more sap grc online training

Comments

Post a Comment

Popular posts from this blog

Sap Security

  CYBSEC  has been working and advising in SAP security issues since 2001, under UNIX, Windows and AS/400 platforms. As from 2005, they show an intense activity in the detection of vulnerabilities and have made significant contributions towards their solution.know more sap security online  training                                 In 2007,  CYSEC  began to work directly with SAP Ag Germany, establishing a fluent and highly constructive contact with security areas. Following is a description of SAP system security related services rendered by  CYBSEC : 1. Design of SAP architecture within a secure environment The object of this service is to design or re-design the architecture of SAP with the highest security level possible. This service is focused on defining security in the network topology of SAP components (SAP Applications Servers, Database Servers, Administrators and ...
Read more

SAP Security Recommendations

  Maintain  the SAP secure gateway: There are various attacks to SAP gateway such as running operating system commands without authentication. Restrict access to SAP gateway by proper network controls both internally and externally. If business case exists for customer networks to use RFC communications because of applications such as BEx (Business Explorer), apply proper security configuration on the SAP gateway for restricting TYPE E and TYPE R connections. know more sap security training Please refer to secinfo, reginfo configuration for more information. Make-sure that SAP landscape is free of weak or default passwords: SAP systems contain hundreds or thousands of users. A single compromised account can cause issues for the rest of the landscape. After SAP systems are configured for proper password policy, we recommend running password audits on SAP systems periodically to prevent weak passwords such as " Summer-2012 " or " Welcome01 " to be present. Although su...
Read more