Role of functional consultants in GRC Process Control

Can anybody provide his/her thoughts on the role played by functional consultants (especially FI, MM) in GRC Process Control assignments/projects?

Hi Abhijeet,
Process Control means controls to be implemented in a given Process.
Now what is the Process?
Flow of activities which can be tracked one end to other. Best example:: Procure- to- Pay or Order- to- Cash.
Procure to Pay is one process which starts with Procurement and involves MM-Purchase, and FI-AP mainly. Similarly , Order to Cash cycle starts from SD and stops at FI-AR.
Controls in these processes has to be built at several stages,i.e., at sub-process levels. For Instance, in Procur-to-Pay , more controls are required for Vendor related Transactions.- Person allowed to create vendor should not be allowed to process the Vendor. Internal control on Duplicate Invoices . Payment maintenace of vendor like Bank details changes  in Vendor Master should be cross checked by two tier Authorisation or Composite Role method via Basis.
Henceforth the functinal consultants has more role to identify/design/implement the controls.
There is no readymade tool so far to guide us as to what are the Processes where we need the Controls in SAP. It calls for pure expertise in the domain and vast exposure in building the controls.
Most of the people are embedding controls today  to Comply with various Regulations (SOX/J-SOX/COSO guidelines, etc.). Few are exercising it to avoid Frauds.
Let me know what is <i>your</i> actual concern and where exactly you are looking for the GRC Process Controls? Is it for Audit  or for Implentation ? May be then this forum can be more helpful.
Regards,
Sudhanshu
My points....
Message was edited by:
        Sudhanshu Shekhar Tiwary

Similar Messages

  • Can we rename ABAP roles in GRC Process Control to adhere to naming convntn

    Hello,
    We are working on a new implementation of the GRC Process Control 2.5 product. It comes with 11 standard roles. I wanted to change the names to adhere to our company's role naming conventions. Will this adversely affect any functionality. I know that in PC, there is a additional level of security that is maintained thru the NWBC. How will that be affected? And is it typical to have a non-sap security team maintain the roles/user thru the NWBC and have SAP Security maintain the ABAP users/roles?
    Thanks in advance.

    Hi Arvind:
    We copied the standard delivered ABAP roles to our namespace, made a few additional changes and are using them no problem.  We also copied the NWBC roles to our namespace.  We have the default roles as reference.  We did this for consistency, but also because ABAP roles and App roles can change as the App roles did in SP04.  This way we compare the app roles before and after a SP to make sure we agree with any role changes introduced to default roles.  This way, we don't unknowingly introduce changes to our roles based on the changes SAP introduces to their roles at any given point.
    As far as the tester role goes, it is at the Process level.  If you aren't sure go into the app under User Access => Roles and their tasks like you will assign it and restrict the selection to "proces".  You will see it is at the Process level.  As far as the rest goes, you seem pretty well versed in the security guide so I'm sure you know this, but as long as the level of the role is equal to or greater than the task you can assign it.  Ex:  You can assign a control level task to a Corporate level role but not a Corporate level task to a control level role.
    I hope this helps.
    Matt

  • What is ESOA? What is the Scope/Role for Functional Consultants in eSOA.

    Hi Experts,
    1)     Does eSOA is a tool, application or module?
    2)     What is the relation between eSOA and ECC6.0?
    3)     What is the Scope/Role for Functional Consultants in eSOA?
    4)     What I have to learn in eSOA?
    5)     How it is useful for Functional Consultant?
    6)     How it is useful for Customers?
    7)     How much time it will take to learn eSOA?
    8)     Where can get the Material?
    9)     What all technologies I have to learn before I learn  to eSOA?
    I am working as a SAP HR Consultant. If I want to learn eSOA what are the pre-requisites.
    I donu2019t know anything eSOA.
    Please give me the answers.
    Regards,
    Ram

    Hi Ram,
    See the answers below
    > 1)     Does eSOA is a tool, application or module?
    ESOA is not any tool,application or module. Its a methodology/Architecture
    > 2)     What is the relation between eSOA and ECC6.0?
    ECC 6.0 provides some Enterprises Services through enhancement packages.
    > 3)     What is the Scope/Role for Functional Consultants in eSOA?
    FUnctional consultant should know which ENterprise Serrvices are available and which should be developed to carry out a business process.
    > 4)     What I have to learn in eSOA?
    .         Being a technical guy, there are things to be learnt like ESR, implementing designed serivces through ABAP or Java and consuming it. But being a functional guy, only awareness of what enterprise services are available and what they do and their input/output params and how they can fit into a business process is sufficient.
    > 5)     How it is useful for Functional Consultant?
    see above
    > 6)     How it is useful for Customers?
    Customers can move towards Service Oriented Architecture, get flexibility in changing a business process easily, maintaince cost is less
    > 7)     How much time it will take to learn eSOA?
    depends on your skills
    > 8)     Where can get the Material?
    lot of material in SDN
    > 9)     What all technologies I have to learn before I learn  to eSOA?
    ABAP or JAVA,ESR ( being a technical consultant) , Web Services
    > I am working as a SAP HR Consultant. If I want to learn eSOA what are the pre-requisites.
    you should aware of basics of service oriented architecture
    If you further want to clear doubts, do write up.
    Regards,
    Piyush

  • Re : Roles of  Functional Consultant in upgradation from 4.6b to ECC 6.0

    Hi
              I need the Roles of  Functional Consultant and Technical Consultant in upgradation from 4.6b to ECC 6.0.
    Thanks
    Anto

    Dear Anto,
    In Technical SAP,Upgrade from 4.6 to 6.0- the role of any fucntional consultant would involved integrated with the technical Consultant.
    The phase starts with the technical Patches apply to the latest stack level which will done by the BASIS Consultants.
    Once the System preparation is happened, the next phase is with SPDD phase, Thru this transaction the dictionary Objects-Database elements, database tables and structures of teh latest system can be
    compared with the old system.
    This results in the version modification results between the old and New versions. During this phase the involvement of the Functional Consultant needed for the tech guy, to identify the functional chnages between the two version (Old and New). Which helps for him either to Reset to Original(ie., adopting the new one) or Adopt Modification in previous system(ie., adopting to older functionality)
    Once this is done, the System Upgradation will be done by the BASI, the system will be replaced with new system. At teh end of this phase SPAU phase starts, which inturn reults with version difference in the field namely, Programs, Reports, Screens, Messages, Notes an Function Modules. Here too the involvement of functional consultant neede to determine either reset to original or to go with Adopt modification from the older design, as explained earlier.
    At teh end of the, moreover the functional consultant role involved in testing the Entire processes and transactoin in the system for system dump and bugs, in necessity to correct teh same and results with nil errors in production client.
    Also the Zprograms invloved in the older versions, needs to be examined for the actual need, and to be justified with adoption in the newer version or by adopting to the updated functionality in the newer version.
    Hope this may give better clarity in the involvement of the Functional Consultant in the Updgrade project.
    Njoy SAP
    Regards,
    -Saravanaganesh

  • Roles of  Functional Consultant in upgradation from 4.6b to ECC 6.0.

    Hi
              I need the Roles of  Functional Consultant and Technical Consultant in upgradation from 4.6b to ECC 6.0.
    Thanks
    Anto

    In Technical SAP,Upgrade from 4.6 to 6.0- the role of any fucntional consultant would involved integrated with the technical Consultant.
    The phase starts with the technical Patches apply to the latest stack level which will done by the BASIS Consultants.
    Once the System preparation is happened, the next phase is with SPDD phase, Thru this transaction the dictionary Objects-Database elements, database tables and structures of teh latest system can be
    compared with the old system.
    This results in the version modification results between the old and New versions. During this phase the involvement of the Functional Consultant needed for the tech guy, to identify the functional chnages between the two version (Old and New). Which helps for him either to Reset to Original(ie., adopting the new one) or Adopt Modification in previous system(ie., adopting to older functionality)
    Once this is done, the System Upgradation will be done by the BASI, the system will be replaced with new system. At teh end of this phase SPAU phase starts, which inturn reults with version difference in the field namely, Programs, Reports, Screens, Messages, Notes an Function Modules. Here too the involvement of functional consultant neede to determine either reset to original or to go with Adopt modification from the older design, as explained earlier.
    At teh end of the, moreover the functional consultant role involved in testing the Entire processes and transactoin in the system for system dump and bugs, in necessity to correct teh same and results with nil errors in production client.
    Also the Zprograms invloved in the older versions, needs to be examined for the actual need, and to be justified with adoption in the newer version or by adopting to the updated functionality in the newer version.
    Hope this may give better clarity in the involvement of the Functional Consultant in the Updgrade project.

  • GRC Process Control

    Hi All,
    Can anybody have knowledge on GRC, can you explain me why this is used and what are the processess involved in this.
    Ragards
    Raka

    Hi,
    Q:what are the prerequisites for such implementation?
    You should have an orgn.Structure with well defined roles.
    If GRC has to be implemented in an IT Landscape,then you have to have a well contrieved IT system supported by competent IT staff.
    Q:Is GRc process control only for SOX compliance or does it take care of other countries compliance requirements.
    The GRc process control is intended to help the management in bringing about a good governance at the enterprise level,identify and mitigate the risks and to bring about a meaningful controls [ access and proess controls].[ all at the enterprise level]
    Thus the purpose of GRC is to add value to the enterprise beginning with by properly aligning the IT with the business,bring about a good governance by implementing the best practices and constantly monitoring and controlling them.Besides a constant endevour is made to improve the maturity of the various components of controls to afford a great comfort level to the stake holders. This is the ultimate goal of GRC.
    The GRC helps complying with regulatory measures [like Basel 2 etc] across countries other than SOX as well- as the focus is about good governance and not about a particular act such as sOX.
    Regards.
    Ramesh.

  • Error in GRC process Control 2.5 login through NWBC

    Hi All,
    we have installed GRC Process Control 2.5 and configured as per the installation guide. when tryig to connect the same  through NWBC, we are getting the following error.
    "The navigation tree is empty (no entries exist for the roles you are assigned in PFCG/PCD)"
    Please help me on this error.
    Regards,
    Gurugobinda

    Hi Gurugobinda,
    In PC 2.5 NWBC, the menu application is based on the role assignment of current login user.
    1. T-Code PFCG: View the SAP_GRC* roles, navegate to the tab Menu, make sure the menu for this role exists. It should exist since the role is delivered by SAP. If you are customizing your own role, you may forget to copy the menu.
    2. T-Code SU01: View the user you are using, make sure the role assignment is done.
    3. Verify the menu from Backend: Login to the R/3 system, at the home page SAP Easy Access page, select User Menu (Ctrl+F10) in the application toolbar, the menu structure will be generated for current user based on the Menu of the roles assigned to him/her.
    4. Login to NWBC via the same user, the menu hierarchy should be shown correctly.
    Any problem please post later.
    Thanks
    Amos

  • Discovery V3 does it consist GRC Process Control.

    Hi All,
        In Discovery V3 we have Compliance calibrator and Acess enforcer as part of GRC(governance Risk and Complaince), what i want to know is that Disocvery V3 consist of GRC process control or not?
    Regards,
    Naveen.

    Hi,
    DS V3 does not have GRC Process control but only the following as you are aware of.
    Compliance Calibrator 5.2, Access Enforcer 5.2, Role Expert 5.2, and Fire Fighter 5.2
    Hope this helps.
    Kathir

  • In PP Interface related issues the role of functional consultant

    In PP Interface related issues what is the role of functional consultant .  what is the approach steps to analyse and resolve the issues  in XI, interface, idoc, etc.,

    For issues relating to interfaces, a functional person would need to diagnose what is causing the issue & thereby informing the technical person where to fix it, if the issue is due to system setup.
    As regards to the steps, I just wish there was a manual which read something like
    10 steps on how to analyze....
    unfortunately there is none that I have come across or even if one is ever written on those lines will be very specific, so not much of use for your need. A good approach would be to have a clear understanding of what the interface is supposed to do, which would assist you in fixing the issues.

  • SAP GRC Process Control - General Questions

    Hi all,
    We have the following general questions regarding SAP GRC Process Control:
    1) Assume that we have set up 5 different SAP Connectors in Process Control. When you configured a specific rule and control and then, schedule the job for such control, how does the system (SAP Process Control) knows which back-end system needs to be accesed for such control?
    2) In which language are the out-of-the box rule steps's script coded? In which different languages can those scripts be coded, what is to say, in which language can we code our own scripts?
    3) How is the detailed flow between SAP Process Control and SAP Back-end system?
    Many thanks. Regards,
        Imanol

    null

  • GRC AC 5.3 and GRC Process Control on the same server

    Hello,
    Can we install SAP GRC AC 5.3 and GRC Process Control 3.0 and GRC Risk Management 3.0 on the same box/ same server.
    Is there a OSS Note, which talks about having the above 3 components on one box?
    Thanks,
    Imran

    Hello Imran,
      1- My 3 question ARE do I need a separate JAVA Stack for GRC Process Control and seperate JAVA Stack for GRC Access Control
    -> No, you can have them installed on save Java stack.
    OR
    Can I use the same JAVA Stack for GRC Process Control & GRC Access Control?
    -> Yes, you can. You have to make sure that you are on SP10 or above for Access Control as only then it will support NW Java 7.01.
    2- Can I use EP 7.0.1 installed on same server for both GRC PC 3.0 and GRC AC 5.3?
    -> Yes, you can.
    3- Can 1 single AS JAVA Database contain both GRC Access Control VIRSA Tables and GRC Process control tables at the same time?
    -> For process Control the tables reside on the backend SAP as it is webdynpro ABAP application and for access control the tables reside on the Java database as it is java and webdynpro JAVA application.
    Regards, Varun

  • GRC Process Control Tables - Specially tables Related to CONTROLS

    Could anybody please let me know the naming convention of tables related to the CONTROLS in SAP GRC Process controls.
    Also could anybody please let me know in which document (source) can I find the tables related to Controls and I am also looking for relation behind these tables.

    HRP1001 and HRP1000 are the master data tables. go to tcode GRFN_STR_CHANGE to see your org structure. hope this helps

  • GRC Process Control MDUG Central Process import error

    Hello to this forum.
    I have a problem with GRC Process Control MDUG import template:
    I have many processes structured on 4 levels.
    In CENTRAL PROCESS folder of template I would like to use same secondary process in 2 different main processes.
    At import check GRC answer that the object is duplicated !
    It seems I can't use again the same object in another process.
    is it possible ? How can I resolve ?
    thanks
    GR

    Can you give an example to be more elaborate

  • GRC Process Control 2.5 - Custom Reports

    We need to develop few custom reports on GRC Process control 2.5. For this we need to identify the Table & Column names associated with WEB Dynpro component.
    For example, I need to know the Table & Column names for web dynpro component:GRPC_MANU_TEST.
    Please help me.
    Thanks
    Sankar

    Hi Sankar,
    Officially, there is no support for custom development of reports in PC 2.5.   I will suggest to wait till PC 3.0. 
    Best Regards,
    Jennifer Cha
    Process Controls - Americas/APJ
    Regional Implementation Group
    SAP Governance, Risk and Compliance

  • Role of Functional Consultant

    Dear All,
    I am SD consultant working since last 3 years now I got the CRM Project to implement.
    Can any body please tell the role of function consultant while implementing CRM 2007?
    I little confused that what is functional consultant responsibility and what is technical consultant responsibility
    Thanks in Advance,
    RAJ

    Hi Raj,
    I understand your doubt!
    Functional consultant is a broad term used for all functional people working on a project. You need to identify the area you are working on, hence would have different roles and responsibilities for the same.
    The following threads can help you get direction towards resolving your query:
    Role of Functional Consultant
    What are the roles & responsibilities as a sap hr functional consultant ?
    Role and Responsibility of support functional consultant SD
    Role of FI consultant with Interface
    Hope this helps!
    Regards,
    Saumya

Maybe you are looking for

  • Camileo P10 Problem with Focus

    Hello everyone, I bought a P10 Camileo and after an hour of use I started to have the following problem: The camera can no longer focus the image from afar. It seems that the focus is fixed, i have to bring the camera to get a clear image. Thank's.

  • IChat Crashes

    So, I have the white MacBook, the kind that was improved when leopard came out. (bought in jan. 08) I had just had my hard drive replaced and I had heard that snow leopard was a good investment, so I bought it, and put it on my computer when I got it

  • Setup Procedure in Data Extraction from R3

    Dear All, Can anyone please let me know the Setup Procedure in Data (Delta) Extraction in BW (checking data sources in RSA7 etc.). I was not able to find proper documents/ PDF on this. Thanks in advance Regards, DTD

  • Where clause in COUNT function and joining two queries

    I have a table that I am trying to count the number of course passed, and also list the modules passed as well. the first problem I am having is what to put in the where variable , so that its not specific to a customer(I can use the query below for

  • Check Writer

    Hi all, I am trying to run full payroll for a single employee. I made an assignment set and ran PAYROLL PROCESS, PRE-PAYMENTS, PAYROLL ARCHIVE(everything went well). Now when I run CHECK WRITER and give the assignment set as one of the parameter, it