GRC 10 and Access Control Risk Analysis

  Introduction

                   GRC offers an effective continuous monitoring solution to help maintain proper segregation of duties (SOD) enabling the organization to confidently prevent fraud throughout the organization and control excessive access.

Governance: Here Senior Executives direct & controls the overall Management Systems. So that the Information reaching to team is accurate, complete and in timely manner.

Risk management: Here Process for identification, Analyses and response to the Risks is taking place. Risk may be of any type technology, financial, information etc.

Compliance: Here necessary corrective actions are taking place if the requirements defined are not in stated condition.

  

Difference between GRC5.3 and GRC10

Properties	GRC 5.3	GRC 10
Name Change	SAP GRC Business objects Access control	SAP Access Control (from May 2012)
Risk Analysis	Risk analysis and remediation	Access Risk Analysis
Emergency	Super user Privilege Management	Emergency Access Management
Role Assignment	Compliant User Provisioning(CUP)	Access Request Management
Role built Workflow	Enterprise Role Management	Business Role Management
Technology	Java	ABAP
End User Access	Any Browser ( Internet Explorer )	NWBC ( Net weaver Business Client) Or Through Portal Browser

GRC 10 Architecture:

GRC10 Modules:

  

 A.   Access Control

·         Access Control Proactively protects information and prevents fraud through automated access Risk analysis, remediation and mitigation processes

·         Enables to automate the continuous control of access and authorization across the enterprise.

 B.   Process Control

·         Process control is for automated continuous control, monitoring across policies and regulatory requirements

·         Delivers cross system visibility and unified repository of compliance information for an efficient management

      C.    Risk management:

·         Risk Management provides a complete Risk visibility, Key risk indicators, Risk Intelligence through dash boards and surveys.

      D.   GRC Global Trade services:

·         Identify, manage and prioritize risk exposure across global supply chains.

·         Automates export license management and electronics customs communication.

Access Control:

Components of Access Control:

•    ARA- Access Risk Analysis
•    EAM- Emergency Access Management
•    ARM- Access Request Management

Access Risk Analysis:

       The Access Risk Analysis (ARA) module is used for preventive and ongoing monitoring of SOD risks, critical transactions and mitigation controls.

ARA Lifecycle:

                               

Identification of Risk:

          When we assess uses, role or profile against given rule set, it identifies SOD. This Process is called Access risk Analysis (ARA).

ARA can be run at:

           1.    User Level

           2.    Role Level

           3.    Profile Level

           4.    HR Object

Eliminating the Risk:

There are Two Approaches for Eliminating the Risk provided by the sox team Remediation and Mitigation. Below flowchart helps to understand the process flow.

Remediation                                               Mitigation
                                  

About Me

Hello  Everyone,

Most of the time i share the Technical stuffs. but today i want to try something of my own.

Here is my Journey:

My name is Gitesh meaning 'One who learns Gita from eshwar(God)'.

I am from Burhanpur a Historical, Pilgrimage and also the major center for Trade and Textile production.

Burhanpur is situated in the southwestern border of Madhya Pradesh near the bank of Tapti River.

Historic:
Burhanpur was an important outpost of the Mughals. Shah Jahan spent a considerable time in this city, and helped add to the Shahi Qila. The Shahi Qila is one majestic palace in Burhanpur, located to the east of the Tapti River.The main attraction at the palace is the hamam or the royal bath. It was specifically built for Shah Jahan's wife, Begum Mumtaz Mahal, so that she could enjoy a luxurious bath. It is said that she died here giving birth to her fourteenth child. Even today, the ceiling has many intricate paintings.

Pigrimage:
Burhanpur occupies a pride of place in Daawat, especially because of Syedi Abdulqadir Hakimuddin. the holy dawoodi bohra saint who is buried in Burhanpur. His grave is visited by pilgrims from all over the world. The tomb complex 'Dargah-e-Hakimi' includes mosques, gardens, and international class accommodation facilities for visitors.Thousands of pilgrims come to Burhanpur with hope and desire in their heart and go back with their wishes fulfilled.

Industries:
Burhanpur is best known for textile industries. It is the largest hub for Power Loom industry in the state. Also, having one NTC (National Textile Corporation) project 'Tapti Mills' and one private owned spinning mill latest state-of-the-art technology. 30-35 textile companies are best known for interlining cloth, Grey Markin, Bleached Dhoti, Cambric, Power loom Cloth bakram and other types of fabric. 'Texmpo Pipes' is the NSE noted industry, Balaji industry both manufactures pipes and agriculture equipment. Several cotton and oil mills are also there.

Apart from this, it is largest producer of Banana in Madhya pradesh

I have done schooling from St. Theresa Higher secondary School Burhanpur i am always among the top 3 student in the school life. then i moved to pune for doing graduation. i have done Engineering from MMCOE college Pune in Electronics & Telecommunication field.  i am always in the good books of faculty especially for my HOD and that is the reason i am the one who did the final year Project under her guidence.and i remembered my project members Ankit & Ajinkya who worked hard with me to built the Digital voltameter which gives the exact voltage as pressed.

Then after completing my Engg. i have done CDAC (Centre for Development of Advanced Computing) from Pune.In CDAC i learn about Mobile Technology Android and Iphone which i love to learn and started creating the apps. then i got placed in the medium scale IT industry V2 Solution in Vashi Navi Mumbai where i worked on Android & Iphone Automation .

While working in Mumbai , i came to know about the M-Indicator App which gives the details of local trains timings running in the mumbai. and that hit me the idea of creating my own personal app on the same track but for my own city Burhanpur.
then i started my work on it. first and the foremost thing i need to do is collecting important data and facts about Burhanpur.
then after my office work i spend  daily 1-2 hours in planing ,designing and coding for the app. after continuing this schedule for 2 and half months i finally done with the Android app and its time to put that app in play store.

Then, I myself started marketing the app in various social media . i know this app will not help me in making money but i am sure this will help me built my image. since it was just a start. and i myself dont belive that the app was so much liked by most of the people in Burhanpur ,they used my app to see the shuttle train timing , PNR check, Pincodes of villages and various other features which i included in my app.

I named my app as Burhanpur Indicator: Burhanpur Indicator- Android App on Google Play

The number of downloads from the play store has gone near to 1000. and till today i am getting comments saying suggestion to include some new thing in next version and i really feel good on seeing such comments from the people whom i dont know.

SAP Career:
I joined Infosys and went for the Mysore training. Infosys Mysore training period is one of the most important part in my life time journey which i will never forget. campus is nothing but the 'Heaven on Earth'. here i will not go much in depth explaining about campus. there i completed my training in SAP ABAP module and reach pune again to work in projects. At present, i am here in Pune working as a System Engg. in  SAP Security Module. 

Thanks a lot for reading my blog. i would appreciate your valuable comments & Feedbacks
Keep Smiling:)

Hidden Secret codes for Android

Burhanpur Train Guide [Android Application]

                                                
Hi Burhanpur,

                       Below is the link to download the app. Just download it and install in your Android SmartPhones.

http://www.swoopshare.com/file/0d79f9309e97f95fc856bcbdedee35d2/MyTown.apk.html