Ruleset Comparison in GRC10

Hi,
Does any one also know the Ruleset comparison program name in GRC10.
I tried running the Ruleset comparison option from NWBC->Setup-> Access Ruleset Maintenance->Rulesetup->Ruleset Comparison, there is an option to select Risks,Actions,Permission, however on running the comparison tool no risks/action/permission is getting populated in the output report. Is this a bug? has any one else faced this issue?
Cheers,
Sabitha

Dear both,
with the rule comparison report you have the possibility to compare GRC rule sets (old/new) directly in ARA.
Basically you upload the new rule set and you are able to compare which risks, actions or permissions have been changed compared with your old one. Please be aware that you cannot load the new rule set with the similar name as comparison isn't possible then.
The report shows the differences between the rule sets, e.g. which risk, action or permission has differences.
Does this answer your question?
Thanks and regards,
Alessandro

Similar Messages

Is there a ruleset comparison tool available in the market?

Dear all,
I wanted to know if there is a SAP GRC ruleset comparison tool available in the market? As a part of our audit requirement, I would need to compare our current rulesets with the ones from last quarter - To identify any changes/enhancements.
I know Bizrights Approva supports a comparison tool called ExamXML where we can perform a comparison of 2 XML files and figure out the differences/ changes.
Please let me know if any of you has used such a tool for GRC ruleset comparison.
Thanks,
Kunal

>
Kenguru wrote:
> As a part of our audit requirement, I would need to compare our current rulesets with the ones from last quarter - To identify any changes/enhancements. > Kunal
If any auditor is comparing sap delivered rule sets with a companies' grc rule sets (without deep investigations) and reporting the differences in his/her audit report (as white spaces) then the auditor is doing it the wrong way.
The auditor should be aware of the following facts:
1. SAP delivered rule sets are mere best practices (only starting point)
2. Most of the customers modify/update the rule sets as per their requirements
3. Organizational rules are created by customers differently
4. Some customers don't even choose sap delivered rule sets and completely create their own.
So the difference between rule sets is obvious, but these findings may or may not be entirely appropriate to reach to a conclusion for audit purposes.
Best Regards,
Amol Bharti
http://amudee.com

How to Transport Function/Access Risk History

Hi,
I have a requirement where i would need to transport the change history associated to a Function/Access Risk.I wanted to know whether i can really transport the change History of a RIsk/Function across landscape.I have tried performing a change on a Function and transported it individually fron the table which could not actually does not fulfill the requirement.Can you please help me understand if i really could transport the changes associated to a Function/RIsk made in one system across landscape either by transporting the rules or do we have any option which could actually transport the change history of a function/Risk.
Thanks,
Richard.

Hello Richard,
According to one of the leading SAP consultants in this thread, the change history should also be transported with the rule set transport:
Best practice for ruleset development & maintenance - GRC10
I know I usually see the user ID of the person to have performed the latest change against a Function or Risk on the side columns with a date time stamp and recall that it does indeed show it from the changes transported from DEV to QA/PROD. What I have not bothered checking or paying attention to is if the whole change histoy is trasnported from DEV to QA.

No Conflicts found for identical Rules at the Global VS Custom Ruleset

Hi,
We are having an issue with our User level testing where conflicting T-codes(MB01 and ME22N) are showing up with no conflicts at the permission level for the custom Rules.
We ran a comparison of the rules at the permission level for both the Global and the custom Ruleset, the risks are enabled exactly the same way for the Global ruleset and Custom Ruleset. We have reviewed the Risks and generated Rules and they do exist in the system for Custom Ruleset. We ran it with no Mitigations and user exclusions but with no results.
The auth objects in play are M_mseg_bwe, M_MSEG_WWE, M_BEST_BSA.
Please help in figuring out where the undelying problem could be.
Thanks,
Farah

Hi,
I am Birju and novice in SAP. We have R/3 EhP4 and compliance calibrator 4.3 installed. We recently have moved out of parent company's SAP instance and created a new one.
In the process, we have downloaded SAP compliance ruleset from parent company and uploaded here to keep the ruleset same.
We are trying to compere ruleset but don't know how to do it. We tried comparing USOBT_C table but found that the difference is huge.
Can you please let us know how to proceed about comparing CC ruleset?
Thanks,
Birju

CC 5.2 - Adding delivered rules as second ruleset

We are in the process of upgrading from CC 5.1 to 5.2. In addition to carrying over the custom ruleset that we have created for the company, I have been asked to load the delivered rules as a second ruleset, so that the folks in the compliance department can use them for comparison. I have created rulesets by uploading the 7 files (business_processes.txt, function.txt, risks.txt, etc.) and generating the rules. I have also created entire rulesets from scratch, but I have never done both in the same system, though I understand it can be done. The ruleset we are using right now was built from scratch and has been fine-tuned for the company's needs, so I want to keep it intact. What I would like to know is how I go about uploading the delivered rule files without affecting my existing ruleset. I've already seen a note that says none of the functions or risks can have the same IDs across rulesets, so I'm prepared to make those changes to the upload files. Any assistance will be much appreciated!
Thanks,
Dave

Dave,
You've already considered the main hangup most would encounter with loading another ruleset into CC 5.x-- the need for unique Ids within the elements of the ruleset.
One key item that needs to be specified is the default ruleset because the file upload only uploads into whatever has been specified as the default ruleset. Your current default ruleset is likely your customized ruleset. Create a new ruleset to contain the GRC delivered rules, and temporarily set that as your default ruleset. Perform the upload of the text files (and as you note, a prerequisite is to make sure that all of the business process, function, and risk Ids are unique from what already exists). You can then switch the default ruleset back to normal and proceed with generating the rules in background.
Note that you'll want to do this at a time when there is very little expected activity in the system as it's pretty likely that end users of CC will not realize that the ruleset is different as they perform ad-hoc analysis. Also, Access Enforcer risk analysis is always tied to the default ruleset, so for a few minutes at least, if anyone performs risk analysis in AE, they would receive incorrect results.

GRC RuleSet Upload for SAP 5.3

All ,
As a background , we are running on SAP GRC 5.3 Version . When we initially Installed SAP GRC , we created a Ruleset "SAP Rule Set " based on SAP Provided Functions & Actions. Then we created one more Rule set for Client named "GLOBAL". On Course of time , we lost SAP RuleSet , as Global Ruleset was somw how copied to SAP Provided Ruleset
Now , we need to have a fresh SAP RuleSet for comparison purpose with Customer Rule Set "Global ". We got the files from SAP GRC Folder
1) If we upload this Files whether it will overwrite all Available Ruleset in System , (Client Specific "Global "& SAP RuleSet ) or do we have an option just to upload to only one Rule Set . We dont want "Global" Ruleset to be overwritten ?
2) Also , Can you please tell me the steps which we need to perform to get thet SAP Rule Set Updated ?
Thanks ,
Jerry George

Hello Jerry,
1) This point has been discussed so far in the forums, for example:
Loading multiple rulesets?
GRC AC Rule Sets
2) There's no automatic procedure. check here: Note 1604722:
Customers that have implemented Risk Analysis and Remediation should have customized the ruleset to meet their business requirements. Therefore, changes to the SAP best practice ruleset cannot be systematically updated via SAINT as it would potentially overwrite this customization.
However, customers may want to evaluate the changes incorporated into the most recent SAP ruleset to determine if the changes should be added to their own ruleset. Any modifications the customer desires to make will need to be manually made by the customer via the Rule Architect feature of access risk management. The configuration guides available on SAP Service Marketplace provide detailed instructions on how to update rules via the Rule Architect.
Cheers,
Diego.

Report for Comparison of Material Qty

Hi All,
I need to Develop an Interactive report for Comparison of Material Qty. ordered through Purchase requisition, ordered material through PO and corresponding Material Receipt report.
Can Someone Give a brief description about this & fields tcode & tables regarding this report.A sample code would be much appreciated.
Thanks & regards,
Ravi S

To get the material number combined with the PO text you will need the help of an ABAP programmer. The programmer can create a report for you using the function module READ_TEXT in the function group STXD. The tables to use are:
STXH - STXD SAPscript text file header
STXL - STXD SAPscript text file lines
The selection screen should have at least the following:
OBJECT - STXH-TDOBJECT
NAME - STXH-TDNAME
LANGUAGE - STXH-TDSPRAS
TEXTID - STXH-TDID
You find the information for these fields by going to the PO text entry screen and displaying the header information under Goto -> Header. For materials, the object is MATERIAL, the name is "material number", the language is "EN", and the text ID is BEST. You can use this program to get long text in lots of places like information records, purchase order texts, etc.
Hope this helps.

How to do comparison in a loop.

Hi all,
TYPES: BEGIN OF ZROUTE,
         VBELN TYPE VBELN,
         ROUTE TYPE ROUTE,
        END OF ZROUTE.
DATA : IT_ZROUTE TYPE STANDARD TABLE OF ZROUTE,
         WA_ZROUTE TYPE ZROUTE.
      LOOP AT I_XVTTP_TAB INTO LW_XVTTP.
        WA_ZROUTE-VBELN = LW_XVTTP-VBELN.
        SELECT SINGLE ROUTE
                INTO WA_ZROUTE-ROUTE
                FROM LIKP
                WHERE VBELN = LW_XVTTP-VBELN
        APPEND WA_ZROUTE TO IT_ZROUTE.
     ENDLOOP.
results from IT_ZROUTE
vbeln    route
1111     A
2222     B
I have some problem in with the code below. I tried to collect vbeln and route into IT_ZROUTE.
However, after i've got the result, i want to do distiguish between the route.
If route A ne route B, then display an error messages.
My problem is, how do i compare the record by looping IT_ZROUTE? if i set into a temporary variable, the value will always change and i have prb in doing the comparison. eg:
loop it_zroute into wa_route.
   zroute = wa_route-route. "set into a variable
if zroute = wa_route-route
   "display error message
endif.
endloop.
Could anyone give me some tips to enhance my code? Really appreciate your help.

Hi SW,
You should never use SELECT statement inside LOOP statement as it will affect performance of the program. Use FOR ALL ENTRIES for the same.
TYPES: BEGIN OF ZROUTE,
VBELN TYPE VBELN,
ROUTE TYPE ROUTE,
END OF ZROUTE.
DATA : IT_ZROUTE TYPE STANDARD TABLE OF ZROUTE,
WA_ZROUTE TYPE ZROUTE.
************Addition STARTS***********
data : I_XVTTP_TAB_temp like I_XVTTP_TAB occurs 0 with header line.
data : begin of likp_itab occurs 0,
            vbeln like likp-vbeln,
             route like likp-route,
          end of likp_itab.
I_XVTTP_TAB_temp[] = I_XVTTP_TAB[].
sort I_XVTTP_TAB_temp by vbeln.
delete adjacent duplicates from I_XVTTP_TAB_temp comparing vebln.
select vbeln
          route
    into table likp_itab
   for all entries in I_XVTTP_TAB_temp
where vbeln eq I_XVTTP_TAB_temp-vbeln.
if sy-subrc eq 0.
sort likp_itab by vbeln.
endif.
************Addition ENDS***************
LOOP AT I_XVTTP_TAB INTO LW_XVTTP.
WA_ZROUTE-VBELN = LW_XVTTP-VBELN.
****************Not required
SELECT SINGLE ROUTE
INTO WA_ZROUTE-ROUTE
FROM LIKP
WHERE VBELN = LW_XVTTP-VBELN
****************Not required
read table likp_itab witj key vbeln = LW_XVTTP-VBELN binary search.
if sy-subrc eq 0.
WA_ZROUTE-ROUTE = likp_itab-route.
endif.
APPEND WA_ZROUTE TO IT_ZROUTE.
*********Add
clear wa_zroute.
*********Add
ENDLOOP.
Please explain the later part again I am not clear with requirement.
Regards,
Anil Salekar

BRF+ in NW 701: Adding an expression in a ruleset-specific rule

Hi,
I'm running BRFPlus in NW 701 (FDT_WORKBENCH) and I'm aware that, this version has several limitations
For example, in a ruleset-specific rule, I'm not able to add a ruleset variable nor to add a new expression operation as rule operation.
Is there any kind of workaround or I need BRF+ in NW 702 only?
Thank you in advance.
Kind Regards,
Andrea

Hi Andrea,
I am sorry but there is no workaround and it is pretty unlikely that those features will be ported into 701.
A workaround could be to run BRFplus in 702 on a separate machine and connect by RFC. Or have the logic in ABAP abd only call into BRFplus for decision tables, formulas..
BR,
Carsten

Problems with string comparison using

I have a problem using the > and < comparison operators.
When the xsl:if test uses numeric values the comparison works OK. If the
test uses string values it always returns a false result.
The style sheet below shows an example (which should run against any
XML doc with a root element)
Note - the spurious
tags are just for debugging- I write the
output to an HTML page and IE happens to recognise them
even though the rest of the HTML tags are missing !!
<?xml version="1.0" ?>
<xsl:stylesheet version="1.0" xmlns:xsl="http://www.w3.org/1999/XSL/Transform" >
<xsl:template match="/">
<xsl:for-each select="*">
Starting numeric test :
<xsl:if test="(1 < 2)">
In Test, ID= <xsl:value-of select="generate-id()"/>
</xsl:if>
Finished numeric test :
Starting alpha test :
<xsl:if test="('a' < 'b')">
In Test, ID= <xsl:value-of select="generate-id()"/>
</xsl:if>
Finished alpha test :
</xsl:for-each>
</xsl:template>
</xsl:stylesheet>
null

Having looked at the XPath spec I believe what I am trying to do (compare strings with gt and lt type tests) is not supported. The spec indicates that they can only be used for node sets or numerics. Presumably the processor is attempting to convert the values to numbers but evaluating them both as NaN (not a number). Can someone confirm this.
I find this restriction quite strange, is this a situation where an extension function is required ? If so can someone point me to some (Java) examples.
null

Urgent : Help required for logical comparison of two 2GB files.

Large files need to be compared depending on Business logic. No byte to byte comparison to be done. It would require reference of data written at the start of the file at some other later part of the file too while comparing two files. File needs to be stored in memory while comparison is done. Kindly suggest some way out which would give best performance. Memory limitations are 256 MB RAM.

File needs to be stored in memory while comparison is done.
Memory limitations are 256 MB RAM.You have 4 GB of data. You have 256 MB of RAM to put it in. Obviously one of those two assumptions has to be changed. By the way, what is the XML connection for this question?

Order of variables in calculation manager 11.1.2.2 rulesets

Hi,
We are in the process of migrating all our 11.1.2.1 HBR Sequences to 11.1.2.2 Rulesets. While migrating the sequences to rule sets I came across an issue where the order of the variables displayed in the Ruleset designer "Variables" tab doesn't match the order of the rules in the rulesets. This is not the case with the HBR sequences in EAS where the variables are associated with rules with valid Index.
Eg:
EAS
Order of rules in the Sequence: RuleA, RuleB, RuleC
Order of variable in the Launch Variables Tab: VarA1,VarA2,VarB1,VarB2,VarC1 ( Assuming that VarA1,VarA2 and VarB1,VarB2 and VarC1 are variables associated to rules A,B and C respectively.
Calc Manager
Order of rules in the Sequence: RuleA, RuleB, RuleC
Order of Variables in the Variables tab: VarC1,VarA1,VarA2,VarB1,VarB2 ( Random)
My case is more complex because I'm running the same rule for different values for a particular runtime prompt 38 times and they have to run in a order. Now I couldn't associate the rule with the variable that I'm changing.
I tried creating the sequence from scratch rather than importing it from 11.1.2.1 but no luck. Please help!

Raj,
I opened up the .xml file from the Ruleset export and the "Seq_index"( which specifies the rule to which the variable belongs) and "seq" number (which specifies the variable order) are in the correct order as the rules order in the ruleset. But still the variables are not displayed in correct order in the "Variables" tab of the ruleset.
Eg.
Rule order in the rule set: R1,R2,R3
<variable_references>
<variable_reference id="3772" name="*R1v1*">
<property name="seq"> *2* </property>
<property name="seq_index"> *1* </property>
</variable_reference>
<variable_reference id="3770" name="*R1v2*">
<property name="seq"> *3* </property>
<property name="seq_index"> *1* </property>
</variable_reference>
<variable_reference id="3771" name="*R2v1*">
<property name="seq"> *4* </property>
<property name="seq_index"> *2* </property>
</variable_reference>
<variable_reference id="3773" name="*R2v2*">
<property name="seq"> *5* </property>
<property name="seq_index"> *2* </property>
</variable_reference>
<variable_reference id="3774" name="*R3v1*">
<property name="seq"> *6* </property>
<property name="seq_index"> *3* </property>
</variable_reference>
Displayed order of variables in calcmanager: R2v1,R2v2,R1v1,R1v2,R3v1 (Note that the variables belonging to the same rule are showing up in correct order).
It will be very difficult to me to modify the seq# and index in the xml file as I have 40 rulesets with each having 20 rules and around 5 variables for each rule.
Thanks,
Swaraj.

Features comparison of SharePoint Foundation 2010 & Office 365

Hi,
I there any documentation/chart or table comparison of features between Office 365 and SharePoint Foundation 2010?
I can only search comparison between office 365 and SP Foundation 2013.
Thanks!

See http://technet.microsoft.com/en-us/library/sharepoint-online-service-description.aspx
Towards the bottom it has the on-prem feature sets, but has all of the online and onprem feature sets listed on this page.
Trevor Seward
Follow or contact me at...
&nbsp&nbsp
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs.

The Comparison of IIS on Windows Server 2012 R2 and Websphere application Server on R6 or AS400

Customer is looking for the internet application solution, and they would like to know the difference/ comparison of IIS on Windows Server and WAS on Linux. I know it's hard to answer, but is there any data/document/information so that we could convince
customer to use IIS instead of WAS on R6/AS400?

Hi,
I could not say which one is better.
The advantage of IIS, you could refer to:
http://www.microsoft.com/web/platform/server.aspx
Similar thread has been discussed:
Windows/.NET/ASP.NET/IIS/SQL Server vs. Linux/WebSphere/Java/Apache/Oracle information
https://social.msdn.microsoft.com/Forums/en-US/9d3b975d-42cb-48fc-94c4-a0394d9f34e6/windowsnetaspnetiissql-server-vs-linuxwebspherejavaapacheoracle-information?forum=architecturegeneral
Meanwhile, i think you could ask in IIS forums:
http://forums.iis.net/
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

XL Reporter Report for comparison of last month and current month sales

Hi,
Our management requires an MIS report for comparison of sales in revenue and in terms of units for the last and the current month todate.
Is there a way to view this data for both the months together, without any user input?
Best Regards
Jyoti

Jyoti,
I'll try and explain the XLR Report you'd need for this. This is isn't the best way to explain something like this, but I'll give it a shot.
- Put an expansion on Row 8 and choose all Items (*), click Apply
- In A8, put ItemCode
- In B8, put Item Name
- In C8, put Sales - A/R Row Total
- In D8,put Sales - A/R Row Total again
- Setup a Parameter
    - Call it Period
    - Dimension
    - Financial Period
- In Column D, put a column Summary and click into Financial Period
    - click the button to open the selection window
    - click to the parameter tab
    - select your parameter and click OK and click Apply
- In Column C, put a column Summary and click into Financial Period
    - click the button to open the selection window
    - click to the parameter tab
    - in the bottom right corner, add a "-1"   it should look like this @Period-1
    - click OK and click Apply
- In C7 and D7 - choose Financial Period Code from formula builder
             (so you can see the period code at the column header)
This will show sales by item in the current Period (column D) and previous Period (column C)
Hope that helps and at least gets you going. I can't guarantee those are perfect instructions from memory.
Brad Windecker
[Omega Business Solutions|http://www.omegagroup.com]

Ruleset Comparison in GRC10

Similar Messages

Maybe you are looking for