GRC 10.0 - customizing

Could someone describe how the customizing tool works in GRC 10.0 (with an special focus on GRC Risk Management)..
Do I, as a customer, have to define a certain risk -for example relevant in the drug industry and implement it so the software can test against it?

Hi,
I have just checked my SICF settings and found that we have not actually activated those services at all and our NWBC sessions work fine now.
Have you activated the sap/bc/nwbc and sap/bc/webdynpro services?
Also, have you activated the required BC sets for the standard content on Access Controls? This removes the need to do a lot of the basic setups but you still need to follow through the event linkages to check the successful generation etc.
Simon
Edited by: Simon Persin on Sep 21, 2011 5:51 PM

Similar Messages

SAP GRC 3.0 Custom workflow

Hi,
We are implementing GRC3.0 with portal intergration. The standard workflow appears to be working fine.
I have a requirement of either customizing the standard workflow or creating a custom workflow to allow exceptions and remediation notifications to be sent to more than one recipient.
As far I I know, standard workflow just allows 1 recipient.
If I choose to create a custom workflow, how do I configure it in GRC (how do I point GRC to call this custom workflow, instead of the standard one)?
Considering I have a limited knowledge about the workflows, any sort of help will be appreciated.
Regards.

Hi,
You yhould refer to:
http://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/2086538f-038e-2b10-da83-b84afc042cf1
It may help you with the related topic.
Manuel Alejandro

GRC 5.3 custom approval

Hi,
We installed GRC 5.3 ; and its working fine,currently when user submit request from portal ,it will goes to role owner for approval and we are doing this by using standard webservice. Now we want include manger approval flow ,,but we need custom screens for manager for approval, to do this we need to connect back end grc system from portal ,for this there are no webservices are available to connect to system,
so let me knows there anyway can i connect to backend grc system to fetch the data.
Thanks
Surya

hi surya,
check this article for more details about the grc and how to integrate to portal
http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/502a14db-6261-2c10-22b5-95117ab0e5ed&overridelayout=true
if the above link is not open u can refer this wikki for full examples abou the grc and its related
Governance, Risk, and Compliance (GRC) How-To Guides
https://wiki.sdn.sap.com/wiki/display/BPX/Governance%2CRisk%2CandCompliance%28GRC%29How-ToGuides
let me know u need any further information
ravindra

GRC 10.1 custom security policy

On GRC Java system, I am not able to create custom security policy under UME->Configuration->Security Policy. I am able to create on all other systems except GRC and NWDI system I it related to support pack level or facility is not available on these releases
Thanks Shankar

Shailendra:
Might be because there is no Java stack. AC and PC now run on the ABAP stack and I think SAP recommends not using dual stack. The only Java stack in the GRC 10.0 landscape that I'm aware of is for ADS.
Thanks.
Matt

Finding data in GRC-PC for custom reporting

We're using GRC-PC version 2.5 and would like to create a customized issue detail report that contains, among other things, the Control Significance indicator (Key Control or Standard Control), and the text from the Description and Comments boxes for the issues and remediation plans.
Can anyone tell me where (table & field) our developers can find this data? So far, they have been unsuccessful.
Thanks
Jeff

Dear Jeff,
the signifficance indicator you can find in table HRP5304.
In transaction GRPC_STR_DISPLAY you find the objects used by PC 2.5 and from the technical information (F1) you can derive the table where information is stored.
Feel free to ask me if you do not find specific information.
Kind regards,
Jürgen

GRC 10.0: Customizing Reporting with field ID's

Hi everybody,
we need some reports which are delivering some special information. These informations aren't exist in any of the standard reports. So we would like to customize them.
I know there is a customizing table V_GRFNREPCOLUMN how to adjust the available reports and I do it like the instruction:
1) Copy an existing report
2) Check all the technical adjustments
3) change the columns for this report
But there is one problem: The field ID that I need is not available. There are more than 2000 field ID's but not the one that I need. I don't need a custom field because the information is still excisting in the data dictionary. I know the SAP table and the field ID.
For example:
We need a list/report where you could see all the control owners of every organisation. I couldn't found a report and I guess there is no one in the SAP standard. After copying a standard report I couldn't find the right field ID. There is one for owners of subprocess and processes and also one for cross regulation control owners, but not for the e.g SOX control owner.
I try to search in which SAP databse table the information is saved. It is HRP1852. The field ID is (I guess) USERNAME, but this field ID is not available in the customizing of the reports.
So is there a possibility to enlarge the range of the field ID's?
We could programm our own report, but this would be too expansive and I just want to use the possibility of the standard report customizing.
Thanks a lot
Regards Timo

Hi,
I have just checked my SICF settings and found that we have not actually activated those services at all and our NWBC sessions work fine now.
Have you activated the sap/bc/nwbc and sap/bc/webdynpro services?
Also, have you activated the required BC sets for the standard content on Access Controls? This removes the need to do a lot of the basic setups but you still need to follow through the event linkages to check the successful generation etc.
Simon
Edited by: Simon Persin on Sep 21, 2011 5:51 PM

One GRC connected to multiple R3

Hi
Needed you expert opinion
I am implementing GRC for a customer with 10 R3 systems
We have to implement one instance of GRC connected to 10 R3 systems
Each of these R3 belongs to a Business Unit ( 10 different business units in all)
Each of this business Unit is as good as a independent company have their own business and IT processes, roles and user. ( No user would have access in more than one R3 system)
Though many business process and risks would be common amongst the Business units. The risk owner would be different and so would be the mitigation process etc
In the above scenario I have following choices
Choice one - Use Logical system
This would have the least flexibility for the Business unit to manage their risks, actions and permission
Choice Two - Physical systems
Have a choice of common Risk ruleset and connect the 10 R3 systems as physical systems .
In this case the Risks would be common so would have issues related to risk owner, mitigation etc would remain. This would have limited flexibility. Also we may hit the 46000 rules limit
Choice three
Have 10 rulesets (10 sets of risks/functions etc, one each for the business unit)
Each business unit would have their individual risk and thereby greater control
I am inclined towards last choice. My concern is multiple rulesets/risks will lead to an greater number of rules thereby affecting performance
There would be around 6000 users and around 30000 roles in all these 10 systems put together
Can somebody share their experience/expertise on this
Regards

Hello,
I would suggest using the Logical system, and bundle all the 10 systems into One logical system, so you will have to create and maintain only one set of Rules, This will be very helpful in the long run, when you get into the prod support phase.
Coming to your question on using mitigating controls for this approach, You can have multiple monitors for one mitigating control (Please note that there will be only one Management Approver, I would assume it will be someone more at a central level for the entire business in your case). And on the third tab (Reports) in the mitigating control section, you can define a relationship between the systems and the concerned mitigating monitor. This way the mitigating monitor will recieve reports only for their particular system.
Note: This approach will only help if you have a common set of rules across the 10 systems.
Hope this helps.
- Naveen

NFe 3.10 - XML ainda sendo gerado na versão 2.00

Boa noite pessoal!
Fizemos as atualizações nos sistemas e aplicamos do arquivo .SAR no ECC, Support Package 16 no GRC/PI, fizemos customizing no ECC e no GRC mas quando a NFe é gerada na nova versão, as tags do XML onde a versão é informada ainda estão saindo como 2.00.
Nos passos de customizing no GRC, fizemos conforme o Help:
Settings for NF-e Layout 3.10+
NF-e: Maintain Connected Government Systems
NF-e: Maintain Version of Message Types
NF-e: Define Query for Service Status for Authority (SEFAZ)
NF-e: Maintain Batch Parameters
Fazendo um DEBUG, o campo XMLVERS está sendo preenchido no ECC com a versão 3.10 corretamente.
O que percebi (e talvez possa ter algo a ver) é que nos customizings do GRC não tem nenhum campo onde informar que a versão 3.10 refere-se ao namespace http://sap.com/xi/NFE/008 como em algumas configurações das versões anteriores onde era possível selecionar Versão 005a ou 006. Existe alguma outra configuração que tem que ser feita fora essas que comentei?
Obrigado!
Abs.

Pior que se voce olhar na nota 1933985 - NF-e new layout 3.10
Tá lá... certifique se que foi atualizada.
*& Object          REPS LJ_1B_NFEF42
*& Object Header   FUGR J_1B_NFE
*& FORM CALL_XI
FORM call_xi USING    p_bukrs TYPE bukrs
                      p_branch TYPE j_1bbranc_
                      p_model TYPE j_1bmodel       "V1.10
                      p_parallel TYPE flag          "1276438
*>>>> START OF DELETION <<<<<
             CHANGING p_rfcerror TYPE sy-subrc
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
                      p_resend   TYPE flag          "1933985
             CHANGING p_rfcerror TYPE sy-subrc
*>>>> END OF INSERTION <<<<<<
DATA: lt_error type J_1BNFE_INBOUND_TAB,       "1254565
        ls_error type j_1bnfe_inbound,           "1254565
        lv_subrc type sy-subrc.                  "1254565
DATA: lt_bapiret2 TYPE bapirettab.             "1362971
*>>>> START OF DELETION <<<<<
* Define messaging-system destination for RFC
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
DATA: lv_error_status TYPE j_1bnfe_errstatus.           "1933985
* Define messaging-system destination for RFC
*>>>> END OF INSERTION <<<<<<
    if lv_xnfeactive is initial.                    "V1.10
      IF p_model NE lc_cte.                               "1724476
*>>>> START OF DELETION <<<<<
* Call function asych. when RFC connection available
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
* NF-e Layout 3.10 changes                                "1933985
      IF xmlh-version >= gc_nfe_version_3.                "1933985
                                                          "1933985
          PERFORM call_message_system_comm                "1933985
                  USING lv_rfcdest                        "1933985
                        p_resend                          "1933985
                        lv_xnfeactive                     "1933985
                  CHANGING lv_error_status                "1933985
                           p_rfcerror                     "1933985
                           lt_bapiret2.                   "1933985
                                                          "1933985
      ELSE.                                               "1933985
                                                          "1933985
* Call function asych. when RFC connection available
*>>>> END OF INSERTION <<<<<<
          p_rfcerror = sy-subrc.
        ENDIF.
      ENDIF.
*>>>> START OF DELETION <<<<<
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
                                                          "1933985
      ENDIF.                                              "1933985
*>>>> END OF INSERTION <<<<<<
*          p_rfcerror = sy-subrc.                        "V1.10 1254565
*        ENDIF.                                          "V1.10 1254565
*      ELSE.                                                   "1254565
*>>>> START OF DELETION <<<<<
        call function '/XNFE/NFE_CREATE'                "V1.10
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
*NF-e version 2
      IF xmlh-version < gc_nfe_version_3.                 "1933985
        call function '/XNFE/NFE_CREATE'                "V1.10
*>>>> END OF INSERTION <<<<<<
* empty, everything is OK.                                  "1254565
       lv_subrc = sy-subrc.                                 "1254565
*>>>> START OF DELETION <<<<<
       PERFORM transfer_bapiret2_to_error_log               "1362971
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
       PERFORM transfer_bapiret2_to_error_log               "1362971
*>>>> END OF INSERTION <<<<<<
         move c_a to p_msstat.                              "1254565
       endif.                                               "1254565
       sy-subrc = lv_subrc.                                 "1254565
*>>>> START OF DELETION <<<<<
*>>>> END OF DELETION <<<<<<<
*>>>> START OF INSERTION <<<<
                                                          "1933985
     ELSE.                                                "1933985
* NF-e Layout 3.10 changes                                "1933985
        PERFORM call_message_system_comm                  "1933985
                  USING lv_rfcdest                        "1933985
                        p_resend                          "1933985
                        lv_xnfeactive                     "1933985
                  CHANGING lv_error_status                "1933985
                           p_rfcerror                     "1933985
                           lt_bapiret2.                   "1933985
        lv_subrc = p_rfcerror.                            "1933985
                                                          "1933985
        IF NOT lt_bapiret2[] IS INITIAL.                  "1933985
          CALL FUNCTION 'J_1B_NFE_BAPIRET2_MAP_TO_LOG1'   "1933985
            EXPORTING                                     "1933985
              iv_docnum         = xmlh-docnum             "1933985
              it_bapiret2       = lt_bapiret2.            "1933985
        ENDIF.                                            "1933985
        IF lv_error_status IS NOT INITIAL.                "1933985
           move lv_error_status to p_msstat.              "1933985
        ELSE.                                             "1933985
           move c_a to p_msstat.                          "1933985
        ENDIF.                                            "1933985
        sy-subrc = lv_subrc.                              "1933985
                                                          "1933985
     ENDIF.                                               "1933985
*>>>> END OF INSERTION <<<<<<

GRC 10.0 Workflow customizing problem

Hi experts,
We are working with GRC Access Control 10.0 and when doing the customizing tasks related with workflows we have an issue that doesnt let us continue.
Here is the background information.
We are in the "IMG/Governance Risk and Compliance/General Settings/Workflow/Perform Automatic Workflow Customizing" or easiest, we are in transaction code SWU3.
Here we have: Maintain Runtime Environment, all green, Maintain Definition Environment, all green, Maintain Additional Settings and Services, a red cross :(.
So, when opening the tree of our red cross task, we find that the only task that is with a red cross is "Maintain Web Server".
So, we execute the task, and here we have the following information:
Service = Webflow (Internet)
Address web server = http://<our web server>:8000/
Protocol Address = HTTP
Path of service = sap/bc/workflow_xml/?
URL = http://<our web server>:8000/sap/bc/workflow_xml/?
And here is something that kept our attention. When we push the button to test the URL, our IE opens a page but it is in blank (it doesnt show anything).
As we saw that, we thought that the service was not active and so went to transaction SICF and checked it, and yes, when you test the service, it doesnt work.
We finally, checked support packages upgrades and went to SP5 in our GRC server and SP5 in both plugins in our SAP ERP server.
And, here we are. Have no idea what else to do or check.
Any suggestion?
Thanks very much in advance.

Hi,
I have just checked my SICF settings and found that we have not actually activated those services at all and our NWBC sessions work fine now.
Have you activated the sap/bc/nwbc and sap/bc/webdynpro services?
Also, have you activated the required BC sets for the standard content on Access Controls? This removes the need to do a lot of the basic setups but you still need to follow through the event linkages to check the successful generation etc.
Simon
Edited by: Simon Persin on Sep 21, 2011 5:51 PM

Custom Field in GRC AC 5.3

Hi Experts,
I'm configuring GRC AG 5.3 SP 16, in HR Trigger we need to fill some custom field, and I want to know if there is no way to mapping these custom fields in UMR?
Best Regards,

Hi Shivam,
In the ERM>>COnfiguration>>system....have you maintained the MS server name???
If NOt please maintain....
Check for the test connection..
Regards
Gangadhar

Custom Fields in GRC 10.0 - CUP

Dear Experts,
Please help me in creating Custom fields in GRC 10 - ARM (CUP). I want to create Custom field called Country and assign approvers to that field and Make user of this field in user request form as mandatory field.
Could you please let me know how to create custom field and assign approvers to the same and make the same mandatory while user is create a request for new account in the sytem.
I appreciate your help.
Thanks,
Raj

Hello Raj
As per my knowledge we can create custom fields in SPRO, path is
IMG>GRC>General settings>User defined fileds
under this you will get two types
1.NON HR defined fields
2.HR Defined filds
Baithi

SAP GRC AC 10 - Unintentional line break inserted into custom notification email

Hello
We are having a strange cosmetic issue with one of our custom notification templates. When the notification is sent two sentences in different parts of the email are being cut off and sent to the next line. We tried to review in Word to see if there were any hidden breaks or margins. We also tried to manually type in the information as well as paste into notepad then back into SE61. We cannot seem to figure out where these breaks are coming from. I've included a few screen shots below. Any help is appreciated!
SE61 DOCUMENT TEXT
EMAIL NOTIFICATION TEXT
NOTE: The sentence breaks after training in the sentence beginning with "For additional information about GRC..." and "(This email was generated by an automated..."

Hi Stacey
From the screen shot you cannot see any issues (can understand confusion)
Are you able to try to remove the paragraph and save. Exit SE61 completely to free up any buffer and then go back in and re-add it?
Possibly look in other SCN communities as it's SE61
Regards
Colleen

Testing custom ABAP program in GRC PC 3.0

We have developed few custom ABAP program and linked it to Rule Script and Rule in GRC PC 3.0. When we schedule a job to test this control, we are not getting any hyperlink to results in Job monitor.
In other words, test result in job monitor is blank.
Please help

Hello Atul,
please create an OSS message for this problem.
Best, Jürgen

GRC Process Control 2.5 - Custom Reports

We need to develop few custom reports on GRC Process control 2.5. For this we need to identify the Table & Column names associated with WEB Dynpro component.
For example, I need to know the Table & Column names for web dynpro component:GRPC_MANU_TEST.
Please help me.
Thanks
Sankar

Hi Sankar,
Officially, there is no support for custom development of reports in PC 2.5. I will suggest to wait till PC 3.0.
Best Regards,
Jennifer Cha
Process Controls - Americas/APJ
Regional Implementation Group
SAP Governance, Risk and Compliance

Include Custom transactions GRC ruleset

Hi Everyone,
Can anyone please tell me the best strategy of including the Z & Y transactions in GRC ruleset.
Our SU24 is not maintained , however I have run a program to get all the authority check for these Z transactions
and also segregated them based on business process , we have over 600 custom transactions and they re compltley customized ones , they are no SAP standard programs in it.
I have all the authority checks in place for these Z-transactions , now the question is how to group them under relevent fucntions
I have used following stategy but it wasnt much helpful suign the CDHDR & CDPOS tables .
since these are completley customized the change object they update in CDHDR table is being updated by another Z transaction .
so I am bit lost , I am only left with an option of creating new fucntions. which is quite tedious
any help would be much appreciated
Best Regards
Jhon

Hi Jhon
Deleting the standard ruleset takes about 1 minute if you obtain the script from SAP Support.
If you do NOT delete the standard ruleset then
     To add your Custom Tcodes to existing functions you should use the Rule Architect, if you try to load (using the upload files) new versions of functions that already exist the results are not always as expected, eg: the functions existing content will be deleted
     You will NOT be able to overwrite existing risks using upload files, therefore you will be forced to use rule architect, however, new risks can be uploaded using the upload files
If you do delete the standard ruleset then
    Add the new Tcodes and functions/risks etc into the upload files and upi do not need to use the Rule Architect
There is no hard and fast rule as to when you should andshould not use Rule Architect and when you should revert to using upload files. However, my rule of thumb is if I have more than 100 changes to make then I use the upload files option.
However, the upload file option can be frustrating as the files have to be perfect in terms of syntax to load and a single space can cause the file to fail and this can be an issue to debug the file

GRC 10.0 - customizing

Similar Messages

Maybe you are looking for