[GRC] IS-Risks in Complex Value Networks

Hi everybody,
I would like to discuss my current research project with you:
Especially in complex value networks, it is important to have mutual risk understanding and mechanisms to control risks among all value adding partners. How can global sourcing projects along automotive supply chains manage and distribute risks among each member? How are risks and their spreading treated within trade cooperation, e. g. how do retailers deal with erroneous labeled EANs or misleading information on goods, provided by wholesaler or manufacturer? Compliance, risk and governance are important factors in the health sector. Time-critical processes in unstructured, complex hospital information systems need to be managed with careful regards to legal regulations and security related limitations.
These are questions, I want to focus on and answer is my research. Do you have any experiences with these issues? What are interesting features in SAP GRC components, supporting these points indirectly or directly? What other features could you imagine to be implemented in future? What are, from your perspective, interesting GRC-topics?
Kind regards
Manuel

Quote from: DaLoona on 26-June-08, 18:30:31
…Your talking nanoseconds here
To give you an idea, we are talking a few seconds gain per hour. Not worth it if you are on the border of stability. Unless you are shooting for some kind of benchmark award.
Quote from: youeffsee on 26-June-08, 03:29:52
...overclocking is extremely addictive...
Oh YEA!!! I still remember my pride when my neighbor said my Pentium 75Mhz was faster than his 125Mhz Pentium. I had it over-clocked to 92Mhz and had cleaned Windows 95 of all the overhead.

Similar Messages

Complex values and CFIF

We have a system whereby delegates can elect to attend a
number of workshops. The system uses a Cart system, storing the
selected workshops in a 2d array until the delegate has finished
selecting, at which point the array content is written to a table.
We want to be able to error check if a delegate selects a
workshop twice.
The code attached seemed to make sense, until we tried it and
found that CF didn't like us using the session.aCart[1] variable as
since v2 you can't seemingly use a complex value in this way.
Does anyone have a workaround on this, or any other
suggestions on how to catch a duplicate entry?
Kind regards

There might be an easier way altogether. Instead of
populating an array, populate a query. Once the delegate submits
his choices, do a Query of Queries where the first two words are
select distinct. Then loop through the resulting query to insert
your records.

GRC 10 - Risk Analysis in legacy system

Hi everybody,
I have a problem with legacy connectors in GRC 10. I implemented the note 1594963. So, I created the legacy files and storage it in GRC server.
When I run the user synch, the legacy connector only synch the first record.
Someone can help me? Someone did implement a risk analysis for legacy systems?
Regards,

Hi Claudio Ekel
Can you share some inputs on the Legacy Risk Analysis.
We have configured the Legacy Connector as per the note 1594963 ; Placed the files on the server & tried running Synchronization Jobs. But the data is not getting uploaded to GRC10 .
We made sure that text files are in UTF-8 format
Is it mandatory to load all the 11 files that are provided in the note 1594963? We have excluded the Profile related files
Can you share a sample of Legacy file formats that you have used for the sync.
Can you throw some light on what could be the possible issues for data not getting uplaoded to GRC10?
Regards,
Pavan Muthyala

GRC AC risk

Is there anyone who can help us to understand/explain the u201CS0260B401 : Maintain an invoice and enter or change payments against itu201D risk on Post Incoming Payments (F-28) and Clear Customer (F-32)?
Also, the Clear Customer (F-32) and Post with Clearing (F-30) conflict.
Thanks,

Hi Vikas,
Further to your comment above, I would like to point you to my thread here and specifically ask you about the following statement:...
3. Open your GRC functions and make sure you have correct back end system updated for them. Check the status of all your GRC functions and make sure they all are active.
I opened up the Functions from NWBC and realized that all the systems for each function were as follows:
1. SAP Basis
2. SAP CRM
3. SAP ECCS
4. SAP HR
5. SAP R3 NON HR Basis Logical Group
6. SAP R3
7. Logical Group
AND ALSO
8. The DESCRIPTION of my RFC Connector ?!
Now my question is as follows:
1. Where in the Pre/Post/GRC300 documents does it say that one must configure each function with the backend system as you state above....should the configurations Connector/Connector/etc etc already mapped the functions to the backend system ?
2. Also Why is the description of my RFC Connector available as a drop down menu from " System" tab on the function edit mode - see attached screenshot.
Your advice would be appreciated.
Best regards,
Paul

Will GRC AC RAR (CC) add value to SOA based SAP implementation?

Hello GRC Experts,
I thought of asking other GRC experts to get their opinions on the GRC AC RAR for the following scenario:
These days there are numerous SAP clients implementing SOA based Composite Applications using the CAF. These SAP PORTAL applications use Adaptive RFC (direct calls) and Web services calls (thru PI/middleware) to the back end SAP applications to complete the 75-100% of the work. The remaining 0-25% work may be completed using the transaction codes. There are also calls to the back end systems originating from non-SAP applications using the web services via some middleware tool to complete the 100% work.
When the GRC AC RAR deals only transaction codes and their associated authorization objects, how do you assess the risk for this type of access in GRC AC RAR and how do you build a custom rules matrix for this type of applications?
Thanks,
Himadama

Hello again,
Has anyone implemented SAP GRC RAR for the SOA based application? What are the challenges faced? If this is not possible, then anyone has any idea if this is covered in GRC AC 2010 version.
Regards,
Himadama

GRC CUP risk analysis

Hi,
Risk analysis give risk status result in balls like red in critical, light red in high,orange in medium.we want,it should say critical,high,medium and low intead of balls and simulate also give same result as risk analysis.we also don't want if critical conflict then it should not allow that role/roles/request to be approved by approver.In stages it already set as "no" for approve roles despite any conflict and also in mitigation too in configuration.
Thanks
Mushu.

Hi Mushu,
None of these is possible in 5.x. You can not customize any of the screens or the process. Go for GRC 10.0 which will be going on ramp-up by end of december as that would allow you to customize most of the screens.
Alpesh

GRC CC Risk Analysis download to Excel SE characters

Hi All,
I have performed a Risk Analysis in our GRC CC5.2 and the output was good. I was able to read Swedish characters in the Internet Explorer. However, when I download the report into Excel and open the file locally from my hardware, I see the Swedish Characters as:
Anna SjÃ¶berg (via GRC CC in IE, it display Anna Sjöberg)
Gerd JÃ¶nsson (via GRC CC in IE, it display Gerd Jönsson)
Anyone have the same display issue with Swedish characters?
Thanks.
Raymond

Hi Raymond,
Kindly let me know which version of Microsoft Excel are you using??
If you are using excel 2000
Check the note 1282267
Regards
Gangadhar
Edited by: gangadhar hm on Sep 4, 2009 1:08 PM

Multi-Valued Complex Value

I'm working on a custom resource adapter that will connect to a resource with the following structure.
user1
firstname:string
lastname:string
middlename:string
aliases
alias1
firstname:string
lastname:string
middlename:string
alias2
firstname:string
lastname:string
middlename:string
aliasN
firstname:string
lastname:string
middlename:string
What is the proper way to implement this in the adapter? I'm especially interested in setting up the prototypeXML properly. My thought is to use a multivalued attribute for aliases and then combine the firstname, lastname, and middlename of each alias into a single delimited value string to be parsed by the IDM forms. Is there a better way?
Thanks

If you're using IDM 8.0 or up I'd really suggest you use resource connectors. The connector programming interface is significantly easier to use than the resource adapter interface.
If you're stuck in the resource adapter framework then you're pretty much limited to the basic data types an adapter supports, integers, strings and lists (arraylists to be exact). It's not really possible to add complex data types without hacking in your own technique, like you suggested as comma delimiting the data.

Security risks outside the radio network?

Hi,
I no longer use my Blackberry as a phone, so the radio receiver no longer connects to any network. As I understand it, this means that I can no longer connect to Blackberry Internet Service.
However, I would still like to use my BB to compose e-mails from time to time (which I can do via a WiFi connection and a program like Logicmail).
My concern is that, since I'm not connected to BIS, my Blackberry might be exposed to more security risks than before. Blackberries are supposed to be relatively secure, but how much does this level of security depend on BIS?
Should I look into BB antivirus programs at this point (assuming that reliable programs of this kind exist)?

Hi ml20102702,
A subscription to the BlackBerry® Internet Service is required to send emails via your BlackBerry® smartphone. You can still have a BlackBerry® data plan, and not have a phone plan. For more information on that, contact your wireless provider.
Thanks.
-CptS
Come follow your BlackBerry Technical Team on twitter! @BlackBerryHelp
Be sure to click Kudos! for those who have helped you.Click Solution? for posts that have solved your issue(s)!

GRC AC 10 - Change default value for field in access request

Hi everybody
in Access request, Is it possible to change the defaut value in the fied "request for" ?
thanks
Aurélien

Hi Aurélien,
Yes we can make it default, please go to EUP and there is a field Request for. please check the snapshot.
Thanks and Regards
Ankit sharma

Complex values cannot be converted to ....

Hi;
I have an odd problem I can't seem to figure out....I wrote a couple of neat little functions to create boolean selects, populate them with the values from a database and "select" the correct one inthe html form.
<cffunction name="booleanSelect" access="public" output="yes" returntype="string"
            description="Creates a booleaen select dropdown" >
        <cfargument name="formvar" required="yes" type="string" />
        <cfargument name="ffalse" required="yes" type="string" />
        <cfargument name="ttrue" required="yes" type="string" />
        <cfscript>
            myvar=evaluate("form.#arguments.formvar#");
            if(myvar eq 0){sel = 'selected="selected"';}else{sel = '';}
            writeoutput('<option value="0" '&sel&' >'&arguments.ffalse&'</value>');
            if(myvar eq 1){sel = 'selected="selected"';}else{sel = '';}
            writeoutput('<option value="1" '&sel&' >'&arguments.ttrue&'</value>');
        </cfscript>
    </cffunction>
can be called via:
<select name="status" id="status">
      <cfscript>booleanSelect('status','Disabled','Enabled');</cfscript>
</select>
and that all works [that's the fixed version]
What I don't understand is why this does not work, the following DOES work in an insert form but not an edit form. and in both cases the form field used to populate the formvar argument is populated and has a value...
<cffunction name="booleanSelect" access="public" output="yes" returntype="string"
               description="Creates a booleaen select dropdown" >
        <cfargument name="formvar" required="yes" type="string" />
        <cfargument name="ffalse" required="yes" type="string" />
        <cfargument name="ttrue" required="yes" type="string" />
        <cfscript>
            if(form[arguments.formvar] eq 0){sel = 'selected="selected"';}else{sel = '';}
            writeoutput('<option value="0" '&sel&' >'&ffalse&'</value>');
            if(form[arguments.formvar] eq 1){sel = 'selected="selected"';}else{sel = '';}
            writeoutput('<option value="1" '&sel&' >'&ttrue&'</value>');
        </cfscript>
    </cffunction>
basically, why do I have to evaluate the formvar argument in one case and not in the other? I think I might be missing something important here....
-sean

basically I have a table in a database with a bunch of boolean '1','0'columns.
I have a function that reads the database table and sets form variables based on the database column and it's default value for an insert action...
for an update action I have another function that reads the tables data and populates the form variables based on the value in the data column
- works very well, all I have to do is make sure my form fileds are named the same as in the database
so for the drop down boolean options I created a function to create the dropdown and select wother the default value or the column value baesd on whether it is an insert or update action... so:
<select name="status" id="status">
       <cfscript>booleanSelect('status','Disabled','Enabled');</cfscript>
</select>
where 'status' is the column name AND the form variable 'form.status' , 'Enabled' & 'Disabled' are just the labels to apply to '1' or '0' on output
at the top of the insert pages I create the default form variables:
    fieldsDefaults('_column_name_','_fields_to_ignore_');
which calls:
    <cffunction name="fieldsDefaults" access="public" output="yes" returntype="void"
                    description="creates default form fields froma database query" >
        <cfargument name="table" required="yes" type="string" />
        <cfargument name="ignorelist" required="no" type="string" default="" />
        <cfargument name="column" required="no" type="string" default="false" />
        <cfif arguments.column is not "false">
            <cfquery name="showcolumns" datasource="#application.dsn#">
                select #arguments.column# from #arguments.table#;
            </cfquery>
            <cfloop query="showcolumns">
                <cfparam name="form.#createVar(evaluate(arguments.column))#" default="" />
            </cfloop>
        <cfelse>
            <cfquery name="showcolumns" datasource="#application.dsn#">
                show columns from #arguments.table#;
            </cfquery>
            <cfloop query="showcolumns">
                <cfif ListFindNoCase(field,ignorelist) eq 0>
                    <cfparam name="form.#field#" default="#default#" />
                </cfif>
            </cfloop>
        </cfif>
    </cffunction>
to create the <cfparam> form defaults...
now on to the edit.... calls this:
    <cffunction name="dataDefaults" access="public" output="yes" returntype="void"
                    description="creates default form fields froma database query" >
        <cfargument name="table" required="yes" type="string" />
        <cfargument name="id" required="yes" type="numeric" />
        <cfargument name="ignorelist" required="no" type="string" default="" />
        <cfargument name="column" required="no" type="string" default="false" />
            <cfquery name="getnames" datasource="#application.dsn#">
                show columns from #arguments.table#
            </cfquery>
            <cfquery name="getdata" datasource="#application.dsn#">
                select * from #arguments.table# where id = '#arguments.id#';
            </cfquery>
            <cfloop query="getnames">
                <cfif ListFindNoCase(field,ignorelist) eq 0>
                    <cfset form[#field#] = "#getdata[getnames.field]#" />
                </cfif>
            </cfloop>
    </cffunction>
which does close to the same thing, but instead populates the form variables with actual database data......
-sean

GRC AC10 Risk analysis error

Hi Experts,
We are getting error in Risk analysis.
We have checked configuration, RFC, Batch Jobs, Rule Generation.
Rules are showing active in Rules library, User and Roles are appearing while searching. I searched SMP for notes and sdn for similar issue but couldn't find anyone.
During risk analysis, explorer gives dump -
The URL call http://itdgrctest.itconline.in:8002/sap/bc/webdynpro/SAP/grac_sod_search_appln was terminated because of an error.
Note
The following error occurred in system G10 : File Could not be opened
The error occurred on application server ITDGRCTEST_G10_02 and in work process 4 .
The termination type was: ERROR_MESSAGE_STATE
The ABAP call stack was:
Method: UPDATE_FILE_DATA_DETAIL of program CL_GRAC_SOD_REPORTING=========CP
Method: SET_VIOLATIONS of program CL_GRAC_SOD_REPORTING=========CP
Method: WRITE_OUTPUT_TO_DB of program CL_GRAC_SOD_RISK_ANALYSIS=====CP
Method: RISK_ANALYSIS of program CL_GRAC_SOD_RISK_ANALYSIS=====CP
Method: DO_RISK_ANALYSIS of program /1BCWDY/0O2TMNDMBELX0AO58TG7==CP
Method: IWCI_GRAC_RISK_ANALYSIS~DO_RISK_ANALYSIS of program /1BCWDY/0O2TMNDMBELX0AO58TG7==CP
Method: EXECUTE_ANALYSIS of program /1BCWDY/0O2TMNDMBFK6DDPI1C1Q==CP
Method: IF_SEARCH_VIEW~EXECUTE_ANALYSIS of program /1BCWDY/0O2TMNDMBFK6DDPI1C1Q==CP
Method: ONACTIONSEARCH of program /1BCWDY/0O2TMNDMBFK6DDPI1C1Q==CP
Method: IF_WDR_VIEW_DELEGATE~WD_INVOKE_EVENT_HANDLER of program /1BCWDY/0O2TMNDMBFK6DDPI1C1Q==CP
What can I do?
If the termination type is RABAX_STATE, you will find more information on the cause of termination in system G10 in transaction ST22.
If the termination type is ABORT_MESSAGE_STATE, you will find more information on the cause of termination on the application server ITDGRCTEST_G10_02 in transaction SM21.
If the termination type is ERROR_MESSAGE_STATE, you can search for further information in the trace file for the work process 4 in transaction ST11 on the application server. ITDGRCTEST_G10_02 . You may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system adminmistrator.
Error Code: ICF-IE-http -c: 600 -u: SABITADA -l: E -s: G10 -i: ITDGRCTEST_G10_02 -w: 4 -d: 20111115 -t: 162851 -v: ERROR_MESSAGE_STATE -e: File Could not be opened -X: 005056A41E8C1ED183EF148A3F5AFCCF_005056A41E8C1ED183EF142157E41CCF_1 -x: A4780FE1FA51F1DD9CCF005056A41E8C
The termination type was: ERROR_MESSAGE_STATE, we I checked in St11. There error log is -
N *** ERROR => System ID and client from ticket are not the same than mine. [ssoxxkrn.c   1061]
N {root-id=005056A41E8C1ED183EEA264CAA11CCF}_{conn-id=005056A41E8C1ED183EEA264C5BA5CCF}_1
N *** ERROR => Neither was ticket issued by myself nor can I find issuer in TWPSSO2ACL (see note 1055856). [ssoxxkrn.c   1067]
N {root-id=005056A41E8C1ED183EEA264CAA11CCF}_{conn-id=005056A41E8C1ED183EEA264C5BA5CCF}_1
M
M Tue Nov 15 16:02:49 2011
M *** ERROR => AdCvtRecToExt: unknown opcode 71 (AD_OPCODE_71), ser 0, ex 0, errno 0 [adxx.c       2472]
M {root-id=005056A41E8C1ED183EEA4E10D4C3CCF}_{conn-id=00000000000000000000000000000000}_0
M *** ERROR => AdCvtRecToInt: unknown opcode 71 (AD_OPCODE_71), ser 0, ex 1, errno 1 [adxx.c       2530]
M {root-id=005056A41E8C1ED183EEA4E10D4C3CCF}_{conn-id=00000000000000000000000000000000}_0
M
If anyone has encountered the similar issue and has found a solution, please reply.
Thanks in advance, Regards,
Sabita

Hi Experts,
Iam also facing the same issue as below..
Please let me konow if nay one of you encountered same issue and how you resolved..
Error while processing your query
What has happened?
The URL call http://yashgrcsrv.sapyash.com:8010/sap/bc/webdynpro/SAP/GRAC_UI_SPM_OWNER_POWL was terminated because of an error.
Note
The following error text was processed in system G10 : The ASSERT condition was violated.
The error occurred on the application server YASHGRCSRV_G10_10 and in the work process 1 .
The termination type was: RABAX_STATE
The ABAP call stack was:
Method: IF_POWL_FEEDER~HANDLE_ACTION of program CL_GRAC_POWL_SPM_FFOWNER======CP
Method: FEEDER_HANDLE_ACTION of program CL_POWL_MODEL=================CP
Method: DISPATCH_ACTION of program CL_POWL_MODEL=================CP
Method: DISPATCH_PREPARED_ACTION of program CL_POWL_TABLE_HELPER==========CP
Method: ON_OBJECT_ACTION of program /1BCWDY/07CT55XNN6UHRCSZMBJE==CP
Method: IF_TABLE_DATA~ON_OBJECT_ACTION of program /1BCWDY/07CT55XNN6UHRCSZMBJE==CP
Method: ON_TOOLBAR_OBJECT_ACTION of program /1BCWDY/07CT55XNN6UHRCSZMBJE==CP
Method: ON_TOOLBAR_OBJECT_ACTION of program /1BCWDY/07CT55XNN6UHRCSZMBJE==CP
Method: IF_WDR_VIEW_DELEGATE~WD_INVOKE_EVENT_HANDLER of program /1BCWDY/07CT55XNN6UHRCSZMBJE==CP
Method: INVOKE_EVENTHANDLER of program CL_WDR_DELEGATING_VIEW========CP
What can I do?
If the termination type is RABAX_STATE, you will find more information on the cause of termination in system G10 in transaction ST22.
If the termination type is ABORT_MESSAGE_STATE, you will find more information on the cause of termination on the application server YASHGRCSRV_G10_10 in transaction SM21.
If the termination type is ERROR_MESSAGE_STATE, you cansearch for further information in the trace file for the work process 1 in transaction ST11 on the application server. YASHGRCSRV_G10_10 . You may also need to analyze the trace files of other work processes.
If you do not yet have a user ID, contact your system adminmistrator.
Error Code: ICF-IE-http -c: 100 -u: GRCADMIN -l: E -s: G10 -i: YASHGRCSRV_G10_10 -w: 1 -d: 20111117 -t: 124258 -v: RABAX_STATE -e: ASSERTION_FAILED -X: 00188B01D3231EE1849D72367EF328EF_00188B01D3231EE1849D723252D408EF_1 -x: 91EB10E1F7B3F19FA8EF00188B01D323
HTTP 500 - Internal Server Error
Your SAP Internet Communication Framework Team
Regards,
Ravi Alluri.

Complex values plotted in HSL color space (wheel)

Dear Users,
I want to plot complex number using a HSL color space. It is sometimes called "a color wheel plotting", see http://en.wikipedia.org/wiki/Filein1perz.png as an example. Any ideas how this could be made in LV, please? (Other color spaces, such as Lab color space are fine, too... ) )
Cheers,

I would find this very useful but I get an error as follows:
missing semicolon
Error on line 6 is marked by a '#' character: "... = v; } else { h / =# 60; // sector 0 to"
Is something missing here?
Thanks,
James Duffin

Succession Planning 3.0: Assigning values to potential, risk, performance

Hi,
In the employee details panel of Succession planning, there is a tab called Talent Assessment. In this tab, there are potential, risk and performance. However, I can't assign a value to it. Where am I supposed to assign these values for the employee?
Thanks.

Hi All,
Yes this is correct - In using the documents available for talent and performance assessments, as well as risk of loss, the values will become populated in SAP's associated infotypes and therefore visible in Nakisa. Risk of Loss is another infotype, not 7408 or 7409, but has the same concept as both performance and potential.
The Nakisa application connects directly to these infotypes to read the stored data. There are a few additional configurations here that also need to be done to display these values in the grid specifically:
In the ABAB Add-on keywords section (Nakisa administrator console, Data center), you will need to define the scales used for performance, potential, and risk of loss values. You will also need to define the criteria ID to use for risk of loss as only one criterion can be displayed in the grid.
Hope this helps!
Agatha

How to avoid GRC provisioning dynamically

Hi All,
I have typical scenario like this:
I have integrated IDM with GRC for risk analysis and SAP system provisioning. I have various workflows where GRC provisioning framework is getting called when GRC privileges are assigned or revoke.
But in one workflow, I need to assign GRC privileges to user but I do not want "AC Submit request" to be invoked.I want privileges to be assigned to the user without sending to GRC.
Any suggestions how I can stop invoking "AC Submit Request" dynamically?
Thanks,
Dhiman Paul.

Hi jai,
Yes {A}{BYPASS_MEMBER_TASK=1} is working if we are writing directly in the To IdentityStore pass. Please find the below screenshot.
But if we are using the script and trying to set the BYPASS_MEMBER_TASK=1 then we are not able to set the value.
Below is the code:
var PrivMskey = uIS_sGet(IDStore,"MSKEYVALUE",BRolePrivilege,true);--> Used to fetch the Mskey of the privileges.
var task_property="{A}{BYPASS_MEMBER_TASK=1}";
var tempval=task_property+PrivMskey;
var SetPrivToUser = uIS_SetValue(mskey,IDStore,"MXREF_MX_PRIVILEGE",tempval);
We are calling uIS_Setvalue to assign privileges to User through Action pass.
This method is returning the following error, {A}{BYPASS_MEMBER_TASK=1}PrivMSKEY BYPASS_MEMBER_TASK=1 is getting concatenated with PrivMskey while BYPASS_MEMBER_TASK should have got set to 1.
Please find the below screenshot.
Thanks,
Dhiman

[GRC] IS-Risks in Complex Value Networks

Similar Messages

Maybe you are looking for