Leading SAP GRC Training Center in Jayanagar

SAP GRC Fundamentals

What is SAP GRC? • Governance, Risk and Compliance Concepts • SAP GRC Components • SAP GRC Access Control • SAP GRC Process Control • SAP GRC Risk Management • SAP GRC Global Trade Services • Access Governance Concepts • Compliance Frameworks • Risk Management Principles • SAP GRC Use Cases • SAP GRC Business Benefits • SAP GRC Consultant Perspective • SAP GRC Administrator Perspective

SAP GRC Architecture

SAP GRC Architecture • Centralized Architecture • Decentralized Architecture • GRC Server • Plug-in Systems • Connected Systems • RFC Communication • Connectors • Connector Groups • Integration Architecture • Front-end Components • Back-end Components • Workflow Components • Database Components • Authorization Architecture • GRC System Landscape • System Mapping

SAP GRC Access Control

Access Control Overview • Access Control Architecture • Access Risk Analysis (ARA) • Access Request Management (ARM) • Business Role Management (BRM) • Emergency Access Management (EAM) • User Access Review (UAR) • SoD Access Review • Risk Remediation • Risk Mitigation • Critical Access • Access Provisioning • Workflow • Reporting

Access Risk Analysis — ARA

ARA Overview • Risk Identification • Risk Analysis • Risk Classification • Risk Levels • Functions • Actions • Permissions • Authorization Objects • Risks • Critical Actions • Critical Permissions • Segregation of Duties • Critical Combinations • Rule Sets • Business Processes • Risk IDs • Risk Reports

Segregation of Duties — SoD

What is SoD? • Why SoD is Required • SoD Conflicts • Preventive Controls • Detective Controls • Risk Identification • Risk Remediation • Risk Mitigation • Vendor Creation + Vendor Payment • Purchase Order + Goods Receipt • Customer Creation + Customer Payment • User Administration + Role Assignment • Invoice Creation + Payment Processing

Critical Access Analysis

Critical Actions • Critical Permissions • Critical Transactions • Critical Authorization Objects • Critical Access Reporting • Risk Classification • Risk Analysis • Risk Remediation

Rule Set Configuration

Rule Set Concepts • Standard Rule Sets • Custom Rule Sets • Rules • Functions • Actions • Permissions • Risk IDs • Business Processes • Risk Levels • Rule Maintenance • Rule Customization • Rule Transport • Create Custom SoD Rule • Function A + Function B = Risk

Risk Analysis at Different Levels

User-Level Analysis • Role-Level Analysis • Profile-Level Analysis • HR Object-Level Analysis • System-Level Criteria • Organizational Level Criteria • Rule Set Criteria • Risk Criteria • Validity Date Criteria

Risk Remediation

Identifying Risk • Prioritizing Risk • Finding Root Cause • Removing Conflicting Access • Changing Role Assignments • Removing Authorization • Re-running Risk Analysis • Risk Closure

Risk Mitigation

Mitigating Controls • Control Owners • Control Monitors • Control Assignments • Control Documentation • Control Effectiveness • Control Monitoring • Risk Mitigation Workflow • Periodic Review

Access Request Management — ARM

ARM Overview • Request Creation • User Information • Role Selection • System Selection • Business Justification • Request Submission • Approval • Risk Analysis • Risk Remediation • Provisioning • Request Tracking • Request History • Request Cancellation • Request Rejection

Access Request Workflow

Workflow Concepts • Workflow Stages • Approvers • Agents • Escalation • Notifications • Approval Paths • Rejection • Delegation • Workflow Troubleshooting • User to Access Request to Manager to Risk Analysis to Role Owner to Security to Provisioning

MSMP Workflow Configuration

MSMP Overview • Workflow Configuration • Process IDs • Paths • Stages • Agents • Rules • Approvers • Notifications • Escalations • Workflow Conditions • Workflow Testing • Workflow Troubleshooting

BRFplus

BRFplus Overview • Rules • Functions • Expressions • Decision Tables • Rule Evaluation • Agent Determination • Workflow Integration • Access Request Routing • Approval Determination by Department • Approval Determination by Role • Approval Determination by System • Approval Determination by Risk • Approval Determination by User Type

Business Role Management — BRM

BRM Overview • Business Roles • Technical Roles • Role Owners • Role Designers • Role Methodology • Role Creation • Role Maintenance • Role Assignment • Role Approval • Role Provisioning • Role Analysis

Role Management

Role Design • Single Roles • Composite Roles • Derived Roles • Business Roles • Technical Roles • Role Owners • Role Approval • Role Provisioning • Role Lifecycle • Role Maintenance • Role Risk Analysis

Emergency Access Management — EAM

EAM Fundamentals • Firefighter Concept • Firefighter ID • Firefighter User • Firefighter Owner • Firefighter Controller • Firefighter Assignment • Reason Codes • Firefighter Logs • Session Monitoring • Transaction Monitoring • Workflow • Notifications • Reports • Centralized Firefighting • Decentralized Firefighting

Firefighter Configuration

Create Firefighter ID • Assign Firefighter ID • Assign Owner • Assign Controller • Maintain Reason Codes • Configure Notifications • Configure Validity • Perform Firefighting • Analyze Logs • Review Firefighter Activity

Firefighter Log Analysis

Log Generation • Transaction Logs • Session Logs • Reason Codes • Controller Review • Log Reports • Monitoring • Compliance Evidence

User Access Review — UAR

User Access Review • Periodic Access Exam • Reviewer Assignment • Access Review Workflow • User-Role Review • Role Removal • Approval • Rejection • Review Completion • Compliance Reporting

SoD Access Review

Periodic SoD Review • Risk Review • Risk Owner • Control Owner • Reviewer • Review Workflow • Risk Acceptance • Risk Remediation • Risk Mitigation

Connectors & Synchronization

Connectors • Connector Types • RFC Connections • Connector Groups • Connected Systems • System Mapping • Repository Synchronization • User Synchronization • Role Synchronization • Authorization Synchronization • Job Scheduling • Synchronization Monitoring • Troubleshooting

SAP Security Integration

SAP Authorization Concept • Users • Roles • Profiles • Authorization Objects • Authorization Fields • PFCG • SU01 • SU10 • SUIM • Composite Roles • Derived Roles • Organizational Levels • User-Role Assignments

GRC Reporting

Standard Reports • Risk Reports • Compliance Reports • User Reports • Role Reports • Firefighter Reports • Access Review Reports • Mitigating Control Reports • Custom Reports • Report Scheduling

GRC Implementation

Requirement Gathering • Business Process Analysis • Risk Identification • System Landscape Design • Connector Configuration • Repository Synchronization • Rule Set Configuration • Workflow Configuration • Access Risk Analysis • Risk Remediation • Risk Mitigation • Testing • Go-Live • Production Support

Real-Time Projects

Project 1: SoD Risk Analysis — S/4HANA to GRC to Risk Analysis to Remediation • Project 2: Access Request Workflow — User to Request to Manager to Risk Analysis to Approval to Provisioning • Project 3: Firefighter Implementation — Firefighter ID to Owner to Controller to Emergency Access to Log Review • Project 4: Business Role Management — Create Business Roles for Finance, AP, Procurement, Sales, Warehouse • Project 5: Risk Mitigation — Identify Risk, Create Mitigating Control, Complete Review Process

Interview Preparation & Career Support

What is SAP GRC? • What is SAP GRC Access Control? • What is SoD? • What is ARA? • What is ARM? • What is BRM? • What is EAM? • What is UAR? • What is a Firefighter ID? • What is a Mitigating Control? • Explain GRC Architecture • What are Connectors? • What is MSMP? • What is BRFplus? • How Does GRC Integrate with S/4HANA? • Explain a Complete GRC Implementation • Design an SoD Rule Set • Centralized vs Decentralized Firefighting • Risk Remediation vs Mitigation • Troubleshoot a Failed Access Request • Troubleshoot Repository Synchronization • Design an Enterprise Access Governance Model • Resume Preparation • Mock Interviews • Placement Assistance