oing to setup GRC Q/A environment now. Already we have Dev GRc and Production GRC.

[Former Member]

we are going to setup GRC Q/A environment now. Already we have Dev GRc and Production GRC.

Now we are going to setup Quality GRC with copy of Production GRC.

we do not have a Q/A environment for GRC right now.  That will be changing.  The current plan is that Basis would create that environment (YGQ GRC Quality ) as a system copy of YGP (GRC Production system).

we Need to come up with a configuration plan for what specific steps we need to perform and in what order, to properly configure YGQ.

Basis team working on copying from Production GRc to Quality GRC system. Next week my GRC Quality system ready. Basis team provide Quality gRC LInks by next week.

What we need to do to configure that environment. 

Is all configurations (Connectors) come to Quality GRC? If yes then we need to diable those connectors and create new connector right?

Please provide any information regarding this..

Thanks

Naga

[Former Member · Accepted solution]

Which ERP/other systems will you be connecting your GRC QA system to? For what purpose?

Yes, the system copy should bring over the java connectors as they are in the source (prod) system. If you want the GRC QA system monitoring your prod ERP systems there's nothing you need to do. If you want them monitoring other systems, you will need to create new connections for those systems, and also create those as monitored systems in the GRC config and them load a ruleset for them. That might well be as simple as exporting the current ruleset and re-importing it for the new systems.

[Former Member · Accepted solution]

Some Quality Systems(YRQ, YRS , Oracle, etc)..

And Can I upload initial system data in Quality GRC also or no need because it is just copy of GRC Porduction..

Thank you for your reply..

Thanks,

Naga

[Former Member · Accepted solution]

If you are monitoring new systems, systems that YGP doesn't already monitor, you are essentially starting from scratch. You need to add new connection data and new rulesets. All mitigations are stored against a system also. The system copy process will copy all the data from YGP, but it is all irrelevant to the new systems you are adding.

The new systems you are monitoring - is that to help you in testing your GRC configuration, or because you actually want to monitor activity on those systems? If the latter, it probably makes more sense to add these systems to your production GRC system.