Queries regarding implemnetation of Access Control Tools

[Former Member]

Hi All,

My team is in the process of preparing itself for implementing Compliance Calibrator 5.2 and other Access Control Tools at client site.

We are very new to this field and just have done some hands on to the tool.

I want you to please explain the exact environment which we get at client site. I am listing my queries?

1). How many resources should be there from our side for a large size organization?

2). What should be their roles? What i know are as follows : Tool administrator, Business Process Analyst(person having tool knowledge as well as SAP functional knowledge)

Can you please explain me what exactly they do ? specially the role of BPA, i am very confused of this persons work.

3). Do they have their own security and SOX domain expert ?What input do they provide us ?

I am in a great mess while dealing with these questions?

I need a very concrete answers of these question.

I will be very thankful, if you please clear my doubts.

Regards,

Anubha

[Former Member · Accepted solution]

Have a look at the <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/bpx-grc">GRC site on BPX</a>. A good starting point is the <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/80c094de-90aa-2910-02b8-e31a6f5ff0c2">GRC Access Control - Access Risk Management Guide</a>. You should also evaluate the <a href="https://www.sdn.sap.comhttp://www.sdn.sap.comhttp://www.sdn.sap.com/irj/sdn/go/portal/prtroot/docs/library/uuid/b09a00da-9d58-2a10-4eaf-b174438f2627">GRC Access Control 5.2 - Integrated Project Plan</a>. The <a href="http://help.sap.com/bp_grcv152/GRC_US/HTML/index.htm">GRC Best Practices for Access Control</a> are specifically designed to facilitate the introduction of Access Control.

Let me know when you need more help - particularly if your project is in Asia Pacific.