GRC AC suite landscape

[Former Member]

Hello,

Can anyone share your thoughts or experience on the SAP GRC AC suite landscape?

How many SAP GRC systems required in SAP landscape from initial development to production?

1. I am assuming that we can have one GRC AC system when implementing all the 4 AC components, and once the implementation is completed we can have another SAP GRC system from go-live onwards. Am I correct? Are there any best practices available on SAP GRC components landscape?

Or

2. Is it a reliable solution having only one GRC AC system in complete SAP landscape?

Thanks in advance.

-Harry

[Former Member · Accepted solution]

Hi,

1. Whatever you said is correct , But Normally many of them fallow 2 tier architecture in GRC Landscape. We will connect GRC DEV system to ECC DEV and ECC QA and test all the scenario's then we will move GRC Configurations to production and By connecting to ECC production,support phase works.Please see below link for landscape diagram.

[SLD|

http://www.sdn.sap.com/irj/scn/index?rid=/library/uuid/a07b4cc8-1a57-2b10-1798-d2fec068473a&override...;

Regards,

Joseph

Edited by: joseph reddy on Nov 10, 2009 12:19 PM

[Former Member · Accepted solution]

I agree with Joseph. SAP recommends you to have at least one staging server where you can test and modify configuration before moving them to production for GRC implementaton.

Most of my clients use 3-tier landscape where they tie Dev SAP to Dev AC, QA SAP to QA AC and Prod SAP to Prod AC.

Alpesh

[Former Member · Accepted solution]

The GRC Landscape can differ tremedously depending on the size and complexity of your business.

It is important to have at least a pre-production system to perform your development & testing but you may wish to have additional production systems for other reasons including:

Segregation of sensitive data - Java authorisations do not allow you to segregate effectively, meaning, you can either see it or you can't. Not see only a subset or change a subset.

Performance management - if you have massive amounts of data, you may not be able to process all of the information so you may have to split reporting by business units etc.

Additionally, if you are using CUP or SPM, you may wish to have a single Production system to manage all user providioning requests i.e. production, QA and development. Therefore, you may choose to connect your pre-production source systems to your productive GRC system.

As you can see, it can get very complex so it really depends on your individual requirements for the tools included.

Simon

[Former Member · Accepted solution]

Alpesh,

Thank you for your information. Could you tell me what is the basic criteria your clients considered when they selected 3-tier GRC landscape instead of 2?

Thanks

-Harry

[Former Member · Accepted solution]

They already were following 3-tier structure and they did not want to change. They mostly play with the tool in Dev system and keep QA system as replica of production.

Alpesh

[Former Member · Accepted solution]

Hallo,

now SAP GRC 10.0 is live. What are the main differences in the landcape for SAP GRC 10.0?

Regards

SwS