学習コンテンツはどのような人に適しているか？
学習コンテンツは、SAPの知識をシンプルかつコンパクトに、そして実践的な方法で身につけたいと考えているすべての人のためにデザインされています。当社の学習プラットフォームは、初心者、上級者、エキスパート向けのコンテンツを提供しています。これにより、段階的に知識を深め、SAPエキスパートになるためのスキルを継続的に向上させることができます。
Access Risk Management in SAP
の一部である：
またはすべてのコンテンツにアクセスする
詳細
Do you need expert guidance on how to plan, implement, and run access analyses? This book takes a practical approach to creating customer-specific SAP rulesets for compliance managers, GRC teams, identity and access management teams, as well as administrators who run these systems. Identify types of risk and the tools available. Take a look at use cases and tools for risk maintenance and explore how to optimize processes, the quality of authorization roles and concepts, the transparency of access rights to data, and functions for data and process owners. Explore key considerations for evaluating a tool for hosting and using a risk catalog. Take a look at the limitations of standard access risk catalogs and learn more about a methodology for customizing a standard risk catalog. Find out why the authors recommend starting with a small access risk catalog before moving on to more complex landscapes. Take away best practices for bringing end users up to speed.
- Considerations for hosting and using a risk catalog
- Limitations of standard access risk catalogs
- Methodology for customizing standard access risk catalogs
- Risk handling process
読書例
2.1 Why the term “access risk catalog”?
An access risk catalog is the object that contains all the rules defined for analyzing authorizations via any tool. However, let us explain why we like to use this exact term.
2.1.1 Why “access”?
Access because we are talking about rules that can analyze authorizations. In other words: Who has access to certain data or functionalities? To use the term risk catalog only is misleading, as we are talking about risks in a specific sense, rather than in a general sense, such as a fire in a plant/office building, currency fluctuation, energy crisis, etc.
2.1.2 Why “risk”?
Risk because the key purpose of the catalog is to identify risky access to an IT system.
Alternative terms are sometimes used. For example, the goal of analyzing access within an SAP system is not always to evaluate regulatory risks. We often recommend analyzing authorizations for information with the goal of obtaining a certain level of transparency for data or role owners (see also Section 1.1.3). An analysis may also be used to support the execution of internal controls for example, to comply with an audit requirement regarding the listing of persons who have posting authorization to a specific account. In these instances, you may have seen the term rule or even analysis used instead of risk.
However, as the term risk is much more common when talking about GRC tools and analysis of access, we regard this as the best term to use for common understanding.
2.1.3 Why “catalog”?
Catalog since it is the complete list of defined risks.
Again, alternative terms are sometimes used. The term ruleset is often used in software tools for grouping risks to structure them or for a specific purpose (e.g., GDPR, external audit). A risk can usually be assigned to more than one ruleset, so in our view, the term is more useful as an attribute of a risk (see also Section 2.2.2) but not as a term for the whole content of the risk database.
Therefore, database would also fit. However, this is a very technical term and we decided against it because when communicating with business users, it just does not feel right.
Another alternative term used is matrix. For us, this implies a combination of functionalities that results in a violation of segregation of duties (SoD), even more so the terms SoD matrix or SoD ruleset. As there are many single functionalities that we should monitor, we do not regard the term as appropriate for the complete content of a risk database, only for those SoD risks.
This is why we use the term catalog within our projects. It is neutral with regard to content, use cases, and the goal of the analysis.
レーティング
A. Sonsalla
14.09.2025
page 120 and 131 are missing, please add, thanks.
学習コンテンツは何が特別なのか？
書籍、ビデオ、オンライントレーニングなど、SAP の製品は SAP の知識を簡潔かつ実践的に提供します。SAPの関連トピックを幅広くカバーし、4ヶ国語で高品質のコンテンツを提供し、個々のニーズに合わせた学習形式を採用しています。
他のプロバイダーとの違いは何ですか？
当社の書籍は、明確な実践的フォーカスとコンパクトで理解しやすい表現が特徴です。複雑なSAPのトピックを簡潔に説明し、不必要なマーケティング用語を排除することで、読者が本質を素早く理解し、新しい知識を直接活用できるようにしています。
製品の交換は可能ですか？
当社の印刷書籍は14日以内であれば、元の状態で返品可能です。
ドイツ国外で本を注文するには？
現在、書籍の発送はドイツ国内のみとさせていただいております。ドイツ国外からご注文の場合は、アマゾンでのご購入をお勧めします。
また、月額19ドルからのデジタル購読で、すべてのコンテンツにアクセスすることもできます。
質問がある場合はどこに連絡すればよいですか？
私たちのチームはいつでも喜んでお手伝いし、できる限り迅速にご質問にお答えします（通常1～2日以内）。また、著者の一人に質問がある場合もご連絡ください。電子メール：contact@espresso-tutorials.com