Custom Transaction addition to GRC Global Rule Set

[arunraj7]

Hello All,

We have recently created a custom transaction for one of our SAP system and the new transaction needs to be added to the Global rule set. The custom transaction is a copy of a standard transaction. From the GLOBAL rule set I was able to identify the functions to which the standard transaction belong to and identified the risks associated with it.

Is it okay to add the custom t-code to this standard function? Or should I create a custom function and custom Risks for this custom transaction?

What is the standard practice? Considering the future upgrades, which is the best way?

Regards,

Arun

[gustavo_soares · Accepted solution]

Hi Arun,

If the custom tcode has the same functionality and therefore risks of an existing tcode, it should be added in the same function. It is not as much driven by technology, but by the business, who will be confused if there are 2 ids for the same risk.

As for the impact of upgrades, please note that the entire ruleset is updated anyway. See note

https://launchpad.support.sap.com/#/notes/1663370

Cheers,
Gustavo

[Former Member]

Arun,

In my opinion its always better to creation a new custom function with the custom transaction(even though its a copy of standard) and create a new custom risk.

Thanks

Ramesh