SAP GRC Access Control

How to do risk analysis and mitigate user in SAP GRC 5.3

We need to create a Business Process !SA

We need to create "unctions namely "unction # as !SA"$%# along &ith actions '()# and '()* and sa+e.

We need to create "unctions namely "unction * as !SA"$%* along &ith actions "()# and "()* and sa+e.

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page !

SAP GRC Access Control

Create a Risk ,- .or the action type along &ith t he .unctions &hich &e created earlier and sa+e

%o& it &ill prompt us to generate risks click on generate. ,t &ill gi+e the a+ailable risks like a.ter running the /ob in either .oreground or back ground. ,n order to see the risks goto Rule architecht0 rules
ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page "

SAP GRC Access Control

action rules list. search by business process. !hen you &ill get the rules

1itigation Create an administrator Goto mitigation administrator create as appro+er

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page #

SAP GRC Access Control

Create an administrator Goto mitigation administrator create as monitor

Create a Business unit Goto mitigation business unit !SB$ create along &ith add appro+er

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page $

SAP GRC Access Control

And then add monitor in the same screen and sa+e.

Create a mitigation control .or risk id !R, Goto mitigation mitigation control create

Select the risk id a.ter .iling all the abo+e the columns
ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page %

SAP GRC Access Control

And then select the monitor and reports along &ith .re2uency.

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page &

SAP GRC Access Control

Submit.

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page '

SAP GRC Access Control

%o& create a user and role &ith the abo+e !0codes and assign it to user in the backend system. When &e run risk analysis in GRC RAR it must gi+e us the risks in+ol+ed in it.

%o& &ith the risk description &e &ill mitigate the user along &ith the mitigation control &hich &e created earlier in RAR. Click on risk in.ormation then it &ill take you to risk resolution screen as belo&.

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page (

SAP GRC Access Control

%o& &e can mitigate the risk so click on mitigate risk it &ill gi+e a pop up like belo&

%o& &ith the created mitigation control in RAR .or that particular Business process &e &ill mitigate the risk &ith all the credentials like mitigation control and monitor control and all &ith control +alid .rom and +alid upto dates like

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page )

SAP GRC Access Control

A.ter submitting3 &e &ill get in.ormation as mitigated user is created success.ully.

ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page !*

SAP GRC Access Control

%o& i. u run risk analysis then it must not populate risks .or this particular user like

,n the same &ay &e can mitigate users .or any business process by creating the monitor and mitigation controls.
ThinkSky Property Copy-Reproduction-Print without permission is illegal and would be prosecuted , Email: sapgrctraining@gmail com

http://thinkskyacademy.blogspot.in/

Page !!