This book provides cross-enterprise configuration instructions and best practices for SAP GRC Access Control implementations in companies with multi-system architectures. The author provides the implementation strategies, configuration steps, and best practices necessary to implement and manage a global access control, risk remediation, and compliance framework across a multi-system landscape, including non-SAP and legacy systems.

Readers discover how to use Offline Risk Analysis, Real Time Analysis, and Management Update Report to manage risk analysis across the enterprise and quickly come to understand how to build and manage a rule matrix for a multi-system enterprise using the Real Time Agent (RTA), as well as the functional use of the Rule Architect. Plus, learn how to configure AC for use with the most common non-SAP systems such as Oracle, PeopleSoft, JDEdwards, and others. You will find out how best to determine the setup of cross-enterprise mitigation controls and alternative controls to mitigate risk as well as how to educate management about conflicts approval and monitoring. Finally, the author shows you how you can develop and execute a plan for Continuous Compliance using best practices for simulation, monitoring, and control.

Highlights:
Cross-Enterprise Rules and Rulesets
Configuration and Operation of Data Extractor
Integration with Non-SAP and Legacy Systems
SOX and the Role of Access Control
Management Reporting
Up-to-date for SAP GRC AC 7.0