[sap-security] SOD exception monitoring
Posted by
Admin at
|
Share this post:
|
1 Comments
| | Posted by rdbarahona (Business Development) on Feb 21 at 6:36 PM |
Hi, I'm brand new here, and fairly new to SAP security in general. My question is how organizations address exceptions to SOD conflicts. I.e., what do you do, if anything, as a compensating control when you have to accept the existence of an SOD conflict?
For example, suppose for whatever reason that one user was required to both create vendors and pay vendors. As a compensating control, would you need to review all of that user's activity to see if he/she has ever created and paid the same vendor? If so, how would you go about doing this? Is there a way to automate this monitoring so that you are only alerted whenever this activity actually takes place?
Thanks!
Dan
__.____._ For example, suppose for whatever reason that one user was required to both create vendors and pay vendors. As a compensating control, would you need to review all of that user's activity to see if he/she has ever created and paid the same vendor? If so, how would you go about doing this? Is there a way to automate this monitoring so that you are only alerted whenever this activity actually takes place?
Thanks!
Dan
Copyright © 2010 Toolbox.com and message author.
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Toolbox.com 4343 N. Scottsdale Road Suite 280, Scottsdale, AZ 85251
Related Content
In the Spotlight
White Papers
In the Spotlight
Earn Recognition for Your Contributions at Toolbox for IT. Gain Points for Community Achievements
View this thread online
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion
Manage group e-mails
Create an FAQ on this topic
Tell us what you think
Unsubscribe from discussion