on 03-08-2010 11:13 AM
Hi All,
What is the diference between CC and FF.please help me any one.
thanks,
suresh
Hi
Please check if this will help you ,
Compliance Calibrator (Risk Analysis and Remediation RAR)
This tool supports real-time compliance by stopping security and controls violations before
they occur. It contains the most comprehensive library of Segregation of Duty (SoD) rules
available for enterprise applications from SAP, Oracle, and PeopleSoft. This makes it easy for
business-process owners to deploy rules applicable to their organisation and to eliminate risks
from enterprise applications.
Firefighter (Super Privilege Management SPM)
This enables super-users to perform emergency activities outside the parameters of their
normal role, but to do so within a controlled, fully auditable environment. The application
assigns a temporary ID that grants the super-user broad yet regulated access, and tracks and
logs every activity the super-user performs using that temporary ID.
Thanks & Regards
Uma Shankar Tekumudi
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Hello ,
RAR help identify risks across systems and supports in eliminating them.
For eg: A user with SU01( user creation) and PFCG ( role maintenance) roles can pose serious risk to the system by creating fake users and assigning critical roles to the same.
RAR supports in identifying such risks and remediating them,
SUP: helps to assign critical roles to users and monitor them
In the above example if the user with PFCG role is not available , the admin can create a new ID ( FF id) with PFCG role and assign it to another user for a limited time period and monitor the usage of this FF id.
Hello,
in RAR
We need to identify the Risks and the risk level segregated by complexity of the risk.identify the Transaction codes (Custom T Codes and Sensitive T Codes) and the relevant function, roles.We need to manage and identify the SoD (segregation of duties) based on Risks , roles.
Where as Firefighter which is nothing Superuser Privilege Management we monitor super users access and keep tab on them what they are accessing.
hope this helps
regards
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.