SAP GRC documentation, where and which one?

When you start to learn about a certain SAP product, you often find a lot of documentation.

You don't always find what you're looking for. But still there is so much information. How to orient yourself in the case of SAP GRC?

The SAP OSS website (SAP ONE Launchpad) what to look for and how?

There is a site that SAP provides to search for solutions to problems, documentation, share problems and solutions. Previously there was a service called OSS Online Service System.

Now this service has been integrated into a single solution in order to be able to search any kind of information on all KBA (Knowledge Based) platforms, communities and notes, the site is as follows: https://launchpad.support.sap.com/ take a  look at the image below.

You have access if you have the credentials provided by SAP to its customers or partners. The interface is based on SAP FIORI.

What you can search for:

• Downloads, which is whether you have downloaded SAP software
• Incidents, which is whether you have opened calls to SAP for product issues
• Innovation Discovery, a tool for identifying what's new within SAP products
• Installations, which is an identification number for SAP systems provided by SAP.
• License Keys, the keys for developer users (Developer) or modified SAP objects
• Products
• Knowledge Base, this is the most relevant part here
• Users, the users who have access to the platform
• Systems, the systems that you have surveyed in the platform

KB articles contain a lot of information at the documentation level, so not only solutions to specific problems. In some cases even videos showing how to configure or solve a given SAP issue.

While searching, it is also possible to specify reference modules (in the Filter By section) and refine the search by making it cover SAP systems installed in the company (taking into account releases and versions).

SAP Help and guides what and how many are there, how to read them?

SAP Help unlike SAP ONE Launchpad is a site accessible without credentials.

It contains the public documentation that SAP releases for each product based on the release.

What can you find here?

• What's New
• Application Help
• Security Guide
• Installation guide
• Configuration guide
• Upgrade guide or Migration guide
• Integration Guide

Not in all cases/systems are the guides above present. However, they are an essential starting point in case a system needs to be installed or managed.
But also at the application level configured and secured.

In the case of SAP GRC Access Control here is the direct link:

https://help.sap.com/viewer/product/SAP_ACCESS_CONTROL/12.0.02/en-US

Which books exist on this topic?

There are several books specific for the area of SAP Governance Risk and Compliance.

Particularly for Process Control, Risk Management and Access Control systems, you will find a list of the most relevant books here.

What SAP courses are available on this topic?

There are many SAP courses on the topic of GRC.

In addition to those related to SAP security. Here you can find a list of SAP courses in the GRC area directory.

Are there any relevant groups or blogs in this area?

As Aglea, we created the first Italian blog dedicated to SAP Security, namely:

• Enterprise Identity Management
• SAP Governance Risk and Compliance Solutions
• Secure Code Development
• SAP Systems Auditing
• SAP authorization model enhancement and definition
• Continuous monitoring systems for SAP systems security
• Defining a corporate strategy for SAP security

Sign up now if you haven't yet!

P.S.: find us also on YouTube SAP Security!

Topics: SAP GRC, sap grc 12, documentazione SAP GRC