CertPas Blog
Start with an overview, then follow a topic or search for the question you need to answer.
Search results
Learn how SAP segregation of duties works, how to identify SAP SoD conflicts, and how to document mitigations, remediation, and periodic access reviews.
A practical guide to SAP Emergency Access Management firefighter IDs, including controlled assignment, reason codes, session handling, and reviewer actions for emergency access.
A practical guide to configuring the SAP Security Audit Log in SM19, reviewing events in SM20, validating coverage, and preserving useful audit evidence.
Learn how to plan, execute, document, and follow up on a SAP user access review with clear ownership, evidence, risk handling, and review controls.
Learn how SAP GRC Risk Management supports risk identification, assessment, treatment, monitoring, and remediation with an operational workflow for maintaining a reliable SAP risk register.
A practical overview of SAP GRC Access Control covering segregation of duties analysis, access request management, emergency access, workflow, and operational troubleshooting.
A practical overview of SAP GRC Process Control for designing controls, scheduling monitoring, managing issues, and preparing reliable evidence.