Skip to Content
author's profile photo Former Member
Former Member

Compliance Calibrator "Get Clean"/"Sprint" phase

We are thinking of swtiching CC on, but are concerned that if initally we will find 1000s of SOD issues, we are creating a massive resource issue to resolve them.

1. Is there any way to at least predict the number of issues based on number of users, roles etc?

2. Can anyone who has implemented give examples of the size of users base and number of initial SOD issues they encountered and

3. Did you implement the SOD rules out of the box, or tweak them etc...?

Yours

Andy

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • author's profile photo Former Member
    Former Member
    Posted on Sep 18, 2007 at 11:35 AM

    Hi Andrew

    obviously this is really difficult to answer, because it depends on the modules you are using and how your roles have been setup.

    On my last project with a manufacturing company (standard modules, ~1500 users) we started off with 2million+ conflicts. this was quickly reduced by making all display roles really display only and removing SAP_ALL access in production.

    this got us down to ~200K conflicts at object level. Then the fun started :->

    hope this gives you some idea. happy to discuss off line further with you

    regards

    Naveed

    e: Naveed@centrotec.co.uk

    Add a comment
    10|10000 characters needed characters exceeded

  • author's profile photo Former Member
    Former Member
    Posted on Sep 18, 2007 at 02:13 PM

    In answer to your questions

    1. no easy answer, but a colleague of mine swears by (users x single profiles) x 10 as a guestimate, but untimately each company is unique, but

    2. it is not unusal to get an answer of over 2m, I have several customers in this boat, each has 2,000-30,000 and a similar number of roles.

    3. Each customer is unique therefore their ruleset should be unique.

    Afterall how can the out of the box ruleset meet all of the Internal Control requirements for all different industries in all countries for all legislations for all versions of SAP, it can't!

    Your next question is how long does it take to build your own ruleset, I have clients that have take 2 weeks and others that are still working on it after 15 years!!

    Add a comment
    10|10000 characters needed characters exceeded

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.