GRC Landscape Design

Hello Experts,
Appreciate if you can please share your views on following points about GRC landscape:
SAP recommendations, 3 tier landscape (or at least 2 tier) for GRC Access Control -->
what is the use of having 3 tier landscape >>
a. Will there be any sort of transports from DEV -> QA -> PRD, if yes then what kind of data can be moved from one system to another (rules/risks,etc..)
b. Can we connect QA and PRD to backend SAP and Oracle PRD systems?
How the data flow is from GRC applications to backend systems.
As per my understanding, in RAR and SPM - data flows only from backend system to GRC side but not vice versa (please correct me if i am wrong).
So similar to this, how is the data flow for other applications.
Would highly appreciate if you can share your experiences !!!!
Thanks
Davinder

D P,
  Please find my response below:
a. Will there be any sort of transports from DEV -> QA -> PRD, if yes then what kind of data can be moved from one system to another (rules/risks,etc..) You can follow same standard what you have at the client side. You can transfer most of the configuration but not data in CUP and RAR.
b. Can we connect QA and PRD to backend SAP and Oracle PRD systems?
Yes.
How the data flow is from GRC applications to backend systems.
As per my understanding, in RAR and SPM - data flows only from backend system to GRC side but not vice versa (please correct me if i am wrong).
You are right about RAR and SPM. In the case of CUP and ERM, it is vice versa as CUP and ERM provisions users and roles in the SAP backend systems.
So similar to this, how is the data flow for other applications.
Regards,
Alpesh

Similar Messages

  • Landscape Design Plans

    Hi
    I'm looking for help to create plans for a landscape design and I would like it to be vector-based if possible.
    I have outlines of trees as shown below (ArchiCAD) but I'm not sure of the technique to make the grass look how it does and how to make the trees look that way (apart from drop shadow)
    The site I'm creating a landscape plan for is around 60% grassland, so I want to use the same effect on the first image to represent grass (rather than a solid colour). The next biggest element of the site is trees, around 20% in various sizes, so I want to re-create the trees as shown in the first image. I have Vector outlines for the trees (From ArchiCAD) but I need to apply some sort of style to achieve the effect as shown above.. The other main part of the landscape is limestone pathways, which are very 'rough' i.e merge into the grass, like on the second image.
    What I'm asking is techniques in Illustrator to basically re-create the first image, and add some limestone pathways... I can't really give you a plan because it's basically just grass and a few trees... I have to plan the landscape for a project.
    The overall 'theme' for the plan is 'sketchy' If that helps
    Thank You

    For the edges of the grassy fills, you can apply a solid green fill, apply an Inner Glow Effect to the fill to get the vignette. To get the stipple and/or grain, combine this with another raster effect, like Spatter or Grain.
    You do not need a high Document Raster Effects Resolution setting for this kind of thing, even if it's intended for commercial print. Screen res or 150 PPI is a gracious plenty. When you hit upon a combination you like, store it as a Graphic Style so it can be applied to other objects with a click.
    For your trees, draw three or four variations. Store each one as a Symbol. Place Instances of the Symbols whereever you want on the drawing. Use Transform Each to randomly alter their scale/rotation without disturbing their positions. You can paint an entire forest this way in minutes, and it's also a data-economical way to build the file.
    JET

  • Need landscape design blueprint for trainings

    hi
    i need a landscape design with all business components and all netweaver components included in that design. can any body give me  the  template landscape architecture
    thanks
    akhil

    Hi,
    Check this...
    http://www.easymarketplace.de/online-pdfs.php
    ( Browse in this site)
    https://www.sdn.sap.com/irj/sdn/industry-forums
    Check this also.
    http://help.sap.com/saphelp_nw04s/helpdata/en/43/7843c5eabd1ad0e10000000a114cbd/content.htm
    May i know what is the Landscape you are having or u will have ??
    2system or 3 system ??
    Note: Points always encourage me to reply !!

  • I got hang up and freeze my Mac when start landscape design 17 by Encore which i bought it from App store

    Dear sir.,
    I bought from App Store
    the following
    Landscape Design 17, v17.0.3 (4+)
           ENCORE
    since I download it It does not working and when the program start freeze my computer and hang up until I power force to quit
    I did try to contact the company Encore more than 20 Emails but I did not get any respond from them
    please solve my problems as long as I bought this program from your store not directly from Encore
    best regards

    If you have more than one user account, these instructions must be carried out as an administrator.
    Launch the Console application in any of the following ways:
    ☞ Enter the first few letters of its name into a Spotlight search. Select it in the results (it should be at the top.)
    ☞ In the Finder, select Go ▹ Utilities from the menu bar, or press the key combination shift-command-U. The application is in the folder that opens.
    ☞ Open LaunchPad. Click Utilities, then Console in the icon grid.
    Step 1
    Make sure the title of the Console window is All Messages. If it isn't, select All Messages from the SYSTEM LOG QUERIES menu on the left. If you don't see that menu, select
    View ▹ Show Log List
    from the menu bar.
    Enter "BOOT_TIME" (without the quotes) in the search box. Note the timestamps of those log messages, which refer to the times when the system was booted. Now clear the search box and scroll back in the log to the last boot time after  you had the problem. Select the messages logged before the boot, while the system was unresponsive or was failing to shut down. Copy them to the Clipboard (command-C). Paste into a reply to this message (command-V). Please include the BOOT_TIME message at the end of the log extract.
    If there are runs of repeated messages, post only one example of each. Don’t post many repetitions of the same message.
    When posting a log extract, be selective. In most cases, a few dozen lines are more than enough.
    Please do not indiscriminately dump thousands of lines from the log into this discussion.
    Important: Some private information, such as your name, may appear in the log. Anonymize before posting.
    Step 2
    Still in Console, look under System Diagnostic Reports for crash or panic logs, and post the entire contents of the most recent one, if any. In the interest of privacy, I suggest you edit out the “Anonymous UUID,” a long string of letters, numbers, and dashes in the header of the report, if present (it may not be.) Please don’t post shutdownStall, spin, or hang logs — they're very long and not helpful.

  • Altering photos....eg.landscaping designing and the like...

    How does one take a dig photo and alter it? ... in other words, ...is there anyone out there that has had experience with landscape design using an iMac (and some sort of purchaseable program) and actually design a landscape?
    ...i want to do some major changes around my house and my wife just doesn't get what i am wanting to do.... if i have an altered photo and actually show my wife then she will understand my proposals.....

    I heartily second PhillyPhan's recomendation. You can do some very advanced editing with PSE. Amazon.com often has deals on PSE for about $80. Or, if you're in the market for a new scanner, Canon bundles PSE 4 for Mac with many of it's scanners, even some of the lower prices models.
    If you're looking to do some landscape planning OmniGraffle has templates for laying out areas and adding different plant icons for planning purposes. It came with my G5.
    Do you Twango?
    TIP: For insurance against the iPhoto database corruption that many users have experienced I recommend making a backup copy of the Library6.iPhoto database file and keep it current. If problems crop up where iPhoto suddenly can't see any photos or thinks there are no photos in the library, replacing the working Library6.iPhoto file with the backup will often get the library back. By keeping it current I mean backup after each import and/or any serious editing or work on books, slideshows, calendars, cards, etc. That insures that if a problem pops up and you do need to replace the database file, you'll retain all those efforts. It doesn't take long to make the backup and it's good insurance.
    I've written an Automator workflow application (requires Tiger), iPhoto dB File Backup, that will copy the selected Library6.iPhoto file from your iPhoto Library folder to the Pictures folder, replacing any previous version of it. You can download it at Toad's Cellar. Be sure to read the Read Me pdf file.

  • Home/landscape design app for mac?

    Is there a consumer-level (not some $1000 3D CAD pro app) home and/or landscape design application available for mac similar to Home & Garden designer programs for PC?? I can't find one to save my life!

    Thanks for the ideas - I've searched for quite a while. I mean months now. The Apple website doesn't seem to have what I'm looking for. I've seen programs/apps widely available at regular retail stores for PC - that aren't professional CAD 3D programs that cost 100's or even 1000's of dollars just for laying simple landscape and/or interior design plans. I'm not a professional or business owner - I just want something that can help me layout plans for landscaping my yard and for home remodels etc. There's nothing like this for mac?

  • System Landscape Design for EP-ESS Production Environment

    Hi Experts,
    We are about to implement SAP Employee Self Service solution through SAP Enterprise Portal 6.0 on our Production server.Our activity on development server is completed.The Backend version we are using is R/3 4.7C and using ITS for integration between Portal and R/3.We are using Business Package for ESS 4.6C – 4.7 release 50.4 .We hv ESS userbase of 1000 users .We want to design the system landscape for the Production Server implementation.Can somebody help me the Hardware parameters and system landscape for the same.My Email id is [email protected] .
    Regards,
    Saumya

    Hi Kenneth,
    I have checked all tables that the report made changes. So, I noticed that table was not changed at all.
    Just to inform you, now everything is fine. All connections was stabilished. And I have done tests with sucess. PERFECT!
    Once more, thanks and have a nice weekend.
    Silvio Messias.

  • Landscape design for tablet

    Would it be wrong to design the tablet in a landscape format?
    ANd should I change the site properties to do this?
    Thanks, Rebecca

    Hi Rebecca,
    Please take a look at this forum post. It has good description and suggestion about the layout :http://forums.adobe.com/message/5962039#5962039
    Cheers!
    Aish

  • GRC: Landscape and Installation

    Dear All,
    My Company want to implement SAP GRC Access Control, in many of source i've found that SAP GRC is divided into 3 sequences:
    1. Get Clean
    2. Stay in Clean
    3. Stay in Control
    My Question is:
    1. What is the software files to implement each of them sequences?
    Actually i've read the master guide and installation guide from market place for this installation but still confused about this landscape of this installation, Please help me to install fresh SAP GRC 5.3 all above sequences? any other references?
    Thanks in advance.

    Hello
    You are right, that the SAP GRC Access controls implementation is generally shown in three stages.
    1.Get clean
    2.Stay clean
    3.Stay-in-control
    We have four products / modules in SAP GRC Access controls :
    1. Risk Analysis and Remediation (RAR)
    2. Enterprise Role Management (ERM)
    3.Compliant User Provisioning(CUP)
    4.Superuser Privilege Management (SPM)
    GET-CLEAN : The access and authorization management starts with installation and configuration of RAR. RAR helps to identify all the existing SOD (segregation of duty) violations in the backend ERP systems. Once the SOD violations are identified, these will be addressed either by removing the risks from the system or introducing mitigation controls for the risks.
    STAY-CLEAN : We have three products here to install and configure in this stage, i.e ERM, CUP and SPM.
    ERM : It helps in preventing further introduction of SOD violations in to the system, by making the risk analysis of roles at the point of creation itself.
    CUP : Ensures the user management (assignment of roles ) is free of SOD violations
    SPM : Ensures the actions of superusers free of SOD violations by tracking and controlling their activities effectively
    RAR, ERM, CUP and SPM have many more benefits which will be helpful in effective access and authorization management and I mentioned only the relevant points here.
    Further, all these four  products are independant of each other and the sequence of configuration depends on the client's requirement. However, the integration of these products helps to reap the complete benefits of access control suite.
    The general sequence of configuration would be:
    RAR -> SPM -> CUP -> ERM
    The  Master, security, configuration guides of these products can be found @ http://help.sap.com/  businessobjects/accesscontrols and  the best practices @ SDN
    STAY-IN-CONTORL : Involves continuous review of existing access and cuthorization managment to ensure that the ERPs are free of SOD violations.
    Regards
    Swarna

  • Transport Landscape design??

    Hi all,
              Our client is saying that they require 2 Development system,2 Quality & 1 Production System.How will we design our Transport Landscape??Is it possible to have 2 development & 2 QA in one system landscape??

    Hi,
    This configuration is very much possible, in fact i have worked with a client with similar configuration.
    Transport route can be
    DEV1->QA1->PRD
    DEV2->QA2->PRD
    Now whenever request from DEV1 reaches production it should also simultaneously move to DEV2 and QA2.
    The reverse is to be done when request from DEV2 reaches PRD, it needs to be flushed back to DEV1 and QA1
    This is needed to maintain synchronization between two DEV and QA
    Synchronization danger occurs in scenario when changes/enhancements of similar type are performed at same time in both dev.
    Hence any changes/Enhancements planned should be checked for clash or else synchronization is extremely difficult to achieve.

  • Best landscape design software

    What is the best software to download for a landscape professional for design

    Hi there,
    You do not need to buy at this first time, assuming you do not have graphic design experience you can start by using an Apple application as Pages, Keynote, iPhoto or others in your /Applications/ folder, check it out, try opening applications, read tutorials and welcome presentations or open a template file for some start edition.
    After that you can try a freeware third party application, you will find many of that here: http://osx.iusethis.com/tag/graphics
    Professional applications require a minimum specific knowledge that you would naturally acquire after sometime around with these others.
    Before go on using third party apps would be smart to get one smart removal tool so that you'd be able to remove applications you do not like and related support files in one move, which would be better than having useless files remaining in your system. I use AppCleaner - http://www.freemacsoft.net/ - with it's SmartDelete Preference enabled, set it up if you will.
    Despite most of Mac's applications only need to be copied to your HDD to be ready to run, they usually keep some support file maybe elsewhere the ~/Library and/or /Library/Application Support/ folders.
    Good luck

  • Responsive Design Mode - Landscape Design for Mobile. (CP8)

    Hi,
    Given that the design default on mobile is on portrait, I'm wondering if there is an option to design for landscape. Thank you.

    Do you really need to change the layout totally when the size is so close to each other? Just wondering. Responsive means that when you change the browser size everything will adapt. The breakpoints are only meant to have more 'agressive' changes, like having less objects on mobile screen, rearranging objects in another way etc. If you turn a tablet in landscape mode, it will probably use the Primary layout, if you use it in Portrait mode it will use the Tablet layout. If I understood your question wrongly, sorry.

  • Landscape design using J2SE

    Hi,
    I am hoping that you could assist in the following interface design matter.
    Engen have Oil deports right over the country. These are connected via the WAN.
    These depots runs a Business Application that needs integration with SAP. There are about +/-12 that operate 24/7.
    Currently they are transferring files between the Deport and SAP via MQ Series.
    These transactions files are time critical and are generated adhoc. They are shipment instructions to automated
    truck loading equipment at the plant and the response back to SAP on the actual load taken.
    The plants are sitting in places quite remote which geographically could be hundreds of kilometers away.
    From a design point of view would it be best to just use a File Adapter on the Central Adapter Engine, via a share or would the use of
    a J2SE Adapter Engine (Hosts does not support J2EE due to RAM requirements) with a local File Adapter be best. Keeping in mind that the support and maintenance will have to be done from a Central location (HQ).
    My challenge so far has been that I have not been able to find SAP documentation to guide me.
    I would greatly appreciate if you could refer me to some document that could assist or with any advice you might have.
    Regards
    Willie Hugo

    Hi Willem!
    To keep landscape and maintenance as simple as possible I would start to use the Central Adapter Engine and FTP on the local sites. Are all local sites connected via secure network connections like intranet or VPN? If not security aspects also have to be taken into account (FTPS and SFTP are not secure).
    Please keep in mind just the simple and day-to-day situation that you have to apply patches to adapter engine software. In the worst case all remotely installed adapter engines must be patched by someone. Addintionally you have to ensure at least a 2-system landscape. That means centeral PI x 2 (or 3) plus decentral Adapter Engines x 2 (or 3).
    But you can also have a look at service marketplace under Alias "instguides". There you can find e.g. a Technical Infrastructure Guide for PI 7.1 (and other XI/PI releases). There you will also find security guides if security will become a cirtical factor in your environment.
    By the way: Is it planned to use the PI/XI instead of MQ Series or can it also be a possible solution to leave everything as it is in the locations and just connect MQ series with XI/PI?
    Regards,
    Volker

  • SLD Landscape Design Question

    After reading the Planning Guide - System Landscape Directory, I am left with a question.
    The Setup:
    Standard three system landscape
    ECC 6.0 Ehp5 on NW 7.02ECC Instances: DE1, QE1, PE1
    PI 7.31
    PI Instances: DP1, QP1, PP1
    PI Business Systems: DE1CLNT100, QE1CLNT100, PE1CLNT100
    Each PI Instance has a local SLD
    Management LandscapeSolution Manager 7.1 on NW 7.02
    SolMan Instance: SP1
    Local SLD
    LMDB
    Reading through the Planning Guide, the recommendation (pg. 45, picture below) seems to be to have all systems self-report to PP1. That is, without synchronization, only PP1 knows about any systems because they all report to PP1 and do not report in to their local SLDs. The data is then sent back to DP1 & QP1 via bridge forwarding. Business Systems are manually entered into their respective local SLDs, but then have to be manually exported/imported from DP1 --> QP1 --> PP1. Once it's all gathered into PP1 again, all data is pushed to SolMan's SLD on SP1 via a unidirectional content synchronization.
    If I read this correctly, then all SLD's will end up "knowing" all systems and business systems: e.g. the sld of DP1 will have entries for QP1 and PP1 and for business systems QE1CLNT100 and PECLNT100.
    Earlier in the guide, I gathered that there was value in not having all of the data in Development in that there is then clear separation between non-production SLDs and production SLDs. The above recommended setup seems to go against this idea of separation. Plus, it requires a significant amount of manual upkeep.
    As an alternative (pictured below), what if each environment only reported to it's local SLD (DE1 --> DP1, QE1--> QP1, PE1--PP1). (Note that in the picture the SLD is drawn separate, but I've heard that most customers run their local SLD on PI, so the SLD depicted in each environment actually runs on the PI system in this scenario.) Further, what if the SLD's then synchronized sequentially in a full unidirectional content sync fashion. (DP1 does a full uni-directional Content Sync to QP1, QP1 does a full uni-directional Content Sync to PP1, and PP1 does a full uni-directional Content Sync to SP1.)
    DP1 would only know about it's own systems. QP1 would know about it's own plus DP1 (which it needs). PP1 and SP1 would both have full visibility into all systems.  Furthermore, the manually entered business systems would also be automatically synchronized and the whold manual export/import process could be avoided or  a manual export/import could be implemented between Q and Production for safety with an automatic bridge forward of Data Supplier data.
    Are there downsides to the second scenario that I am not seeing? Please comment!
    Best regards,
      --Tom

    Although the guide states that Dev systems only needs to know about other systems in the DEV environment and QAS systems only needs to know about systems in the DEV and QAS environments and only PRD needs to know all systems, I am finding that I can't get the groups set up correctly when the DEV environment has no visibility to the QAS environment.
    It seems that the recommended structure (where all systems are known in all environments) will facilitate the correct setup of the PI transports. So far, that is the biggest arguement I've been able to find against the second approach outlined above. Using full sync all the way through is also not an option if you're doing any development as any changes in the DEV system automatically flow through to PRD almost instantly. Using automatic bridge forwarding and import/export might be a usable alternative, but the recommended approach from page 41 of the planning guide does seem to have the best of all worlds.

  • Landscape Design

    Hi,
    We have a regular landscape which consists of a Dev - QA - Production - Integration (for some reason Integration was setup after Production initially) and a project Dev and QA in the same landscape.
    once its tested in Project QA, the transports are moved to Regular Integration and then to Production, manually.
    We are configuring the transports through Solution Manager now.
    We prefer to have the project systems in a seperate landscape.
    Clarifications required:
    - Need to transport the Transport Requests from Project Acceptance to the regular Dev and QA, to keep the systems in sync.  How do we handle this if they are in two different lanscapes.
    - Should we use Retrofit to address this issue (to connect two landscapes), if yes, how does it help
    - need to move Integration before Production in the regular landscape.
    - Are there any disadvantages if we have the project systems in the regular landscape
    please clarify.
    Thanks and Regards,
    Nagu

    Hi
    http://help.sap.com/saphelp_nw70/helpdata/EN/14/c795388d62e450e10000009b38f889/content.htm
    might this can help
    Thx
    Mysterious

Maybe you are looking for

  • Error message when trying to upload

    Hi all, I have had my Zen Vision M (60 Gigs) for about two years now. I've never had any serious problems until lately. It hooks up to my computer (I am running Windows XP) just fine, and can hold a charge, but whenever I try and put new music on it

  • ***iPhoto Library won't load? HELP!

    I had a problem with my external lacie drive. disk warrior rebuilt the directory and the drive is fine. Now however iPhoto will not load. At first it said I needed to upgrade the thumbnails and I did so but never knew if it was working? I think the d

  • Adding Signatures in Mail

    I just tried to add another signature to my Mail. But, for some reason, it doesn't show up in the Signature selection area when I am writing e-mails. I've tried quiting the program and restarting, nothing. What am I doing wrong? Very odd! Thanks, j e

  • Does URL Services support client side script?

    My ASP page it built as a portlet, and displays fine but it won't submit. When I view the Source in my browser, Portal didn't include any of my client side vbscript script, then html is there but everything else is missing.... Question: Does URLServi

  • 5c screen cracked had white and black lines now blank if i replace screen will it work

    I phone 5c screen cracked and screen turned black and white now blank I can voice command and make a call  If I replace the screen will it work