GRC 10.0 Pre-Installation

(1)

GRC 10.0 Pre-Installation

Customer Solution Adoption

April 4th ₂₀₁₁

(2)

Purpose of this document

(3)

Disclaimer

This presentation outlines our general product direction and should not be relied on in making a purchase decision. This presentation is not subject to your license agreement or any other agreement with SAP. SAP has no obligation to pursue any course of

business outlined in this presentation or to develop or release any functionality

mentioned in this presentation. This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of

(4)

Content

•

GRC 10.0 Technical Architecture

•

Pre-installation Information

(5)

Content

•

GRC 10.0 Technical Architecture

•

Pre-installation Information

(6)

GRC 10.0 Landscape

Synopsis

SAP NetWeaver AS ABAP 7.02 AC, PC & RM (Software Component: GRCFND_A) SAP GRC Suite 10.0 GTS (Software Component: SLL-LEG)

Nota Fiscal Eletronica

(Software Component: SLL-NFE) Content Lifecycle Management (CLM) SAP ERP (4.6C – 7.1) Non-SAP Business Applications Adapter NW Function Modules (Plug-in: GRCPINW) HR Function Modules PC Automated Cntrls (Plug-in: GRCPIERP) GTS Plug-in (Plug-in: SLL-PI) SAP NW Portal 7.02 GRC Portal Content SAP NW BW 7.02 BI Content 7.06 GRC BI Content Identity Management Solutions (SAP or Non-SAP) optional optional optional http RFC web services RFC optional SAP GUI 7.10 Web Browser

Front End Client

Adobe Flash Player RFC RFC DIAG http CRA* RFC SAP NetWeaver 7.02 Search/Classification GRC Search Recommended for GTS/SPL SAP NW Java 7.02 Adobe Document Services Required for GTS SAP NetWeaver PI

Nota Fiscal Content

Required for Nota Fiscal E.

(7)

Access Control 10.0 Landscape

Synopsis

SAP NetWeaver AS ABAP 7.02 AC, PC & RM (Software Component: GRCFND_A) SAP GRC Suite 10.0 Content Lifecycle Management (CLM) SAP ERP (4.6C – 7.1) Non-SAP Business Applications Adapter NW Function Modules (Plug-in: GRCPINW) HR Function Modules PC Automated Ctrls (Plug-in: GRCPIERP) SAP NW Portal 7.02 GRC Portal Content SAP NW BW 7.02 BI Content 7.06 GRC BI Content Identity Management Solutions (SAP or Non-SAP) optional optional optional http web services RFC optional SAP GUI 7.10 Web Browser

(8)

Process Control 10.0 Landscape

Synopsis SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 SAP ERP (4.6C – 7.1) Non-SAP Business Applications Adapter HR Function Modules PC Automated Ctrls (Plug-in: GRCPIERP) SAP NW Portal 7.02 GRC Portal Content SAP NW BW 7.02 BI Content 7.06 GRC BI Content optional optional http RFC RFC optional SAP GUI 7.10 Web Browser

(9)

Risk Management 10.0 Landscape

Synopsis SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 SAP ERP (4.6C – 7.1) Non-SAP Business Applications SAP NW Portal 7.02 GRC Portal Content SAP NW BW 7.02 BI Content 7.06 GRC BI Content optional optional http RFC RFC optional SAP GUI 7.10 Web Browser

Adobe Flash Player RFC DIAG http CRA* RFC SAP NetWeaver 7.02 Search/Classification GRC Search optional SAP NW Java 7.02 Adobe Document Services

recommended for offline RM surveys

(10)

Global Trade Services 10.0

Synopsis

SAP NetWeaver AS ABAP 7.02

SAP GRC Suite 10.0

GTS

(Software Component: SLL-LEG)

Content Lifecycle Management (CLM) http RFC RFC SAP GUI 7.10 Web Browser

(11)

Electronic Invoicing for Brazil (Nota Fiscal Eletronica) 10.0

Synopsis

SAP NetWeaver AS ABAP 7.02 SAP GRC Suite 10.0 http RFC SAP GUI 7.10 Web Browser

Adobe Flash Player RFC DIAG http CRA* RFC SAP NetWeaver PI

Required for Nota Fiscal Eletronica

RFC Nota Fiscal Eletronica

(12)

GRC Suite

The GRC 10.0 suite runs on AS ABAP 7.02 SP6 or higher Access Control, Process Control and Risk Management are contained in one ABAP add-on “GRCFND_A”

Global Trade Services resides in a separate add-on “SLL-LEG”

So does Nota Fiscal Eletronica have its own add-on “SLL-NFE”

The Content Lifecycle Management (CLM) contains functions for transporting GRC business data e.g. AC Rules or PC Controls

CLM has the same (version) requirements as the GRC 10.0 suite and is installed during the GRC installation (CLM can be disabled if not required)

GRC configuration/customizing is transported using the standard ABAP transport system

SAP NetWeaver AS ABAP 7.02 AC, PC & RM (Software Component: GRCFND_A) SAP BusinessObjects GRC 10.0 Suite GTS

(Software Component: SLL-LEG)

Nota Fiscal Eletronica (Software Component: SLL-NFE)

(13)

Front End

The front-end needs a web browser or (optionally) a client installation of the NetWeaver Business Client 3.0 (NWBC) The web browser can be used to access the embedded NWBC or GRC via the NetWeaver Portal

The Adobe flash player 10 is used for displaying dashboards e.g. RM heat map

SAPGUI 7.10 PL 15 or higher is required for administration or customizing tasks – note that SAPGUI 7.20 is

recommended due to the end-of-maintenance of SAPGUI 7.10

The Crystal Reports Adapter (CRA) is required for viewing (GRC) Crystal Reports

For version specifics (regarding Browser etc.) please refer to the PAM: http://service.sap.com/pam

SAP GUI 7.10 Web Browser

(14)

Portal

The NetWeaver Portal 7.02 can be used optionally

The GRC Portal Content contains the GRC Portal UI elements to access the GRC suite

The Portal’s AS Java can contain an Adobe Document

Services instance, in effect Portal and ADS may be shared on one AS Java instance

SAP NW Portal 7.02

GRC Portal Content

(15)

ERP and Non-SAP Business Applications

The GRC solutions can communicate with SAP ERP and non-SAP business applications via plug-ins

NW Function Modules hold the AC functions for ERP systems without HR (former non-HR RTA)

PC relevant features are contained in the plug-in

GRCPIERP, for example, for running automated controls and the HR relevant functions for AC (former HR RTA) GTS functions are part of the SLL-PI plug-in, for example, for GTS integration into the Logistics, HR, FI/CO and/or HCM processes in SAP ERP

Non-SAP ERP systems can also be connected via adapters from an SAP Partner company

(16)

BI Content

NetWeaver BW can be used for reporting via the GRC BI Content

The GRC BI Content is part of BI Content 7.06

NetWeaver BW 7.02 is used for the GRC BI Content

SAP NetWeaver BW

GRC BI Content

(17)

NetWeaver PI

NetWeaver PI is required for Nota Fiscal Eletronica for exchanging data with authorities in Brazil

PI 7.00 SP14 or any higher version is used for NFe 10.0 like for previous NFe releases, so you do not need to upgrade your PI to use NFe 10.0

SAP NetWeaver PI

(18)

Identity Management (IdM)

AC can be integrated bi-directionally to IdM solutions for provisioning and risk analysis

NetWeaver IdM 7.2 is required for integrating with AC 10.0

Identity Management Solutions

(SAP or Non-SAP)

(19)

Adobe Document Services

An instance of Adobe Document Services (ADS) should be accessible from the GRC AS ABAP for generating offline forms (for example, for PC and RM)

Although it is technically optional, it is highly recommended for generating PDF reports

Adobe Document Services is recommend for offline RM surveys GTS requires the Adobe Document Services for various forms in Customs Management

This ADS can be an existing instance and can also be shared with other applications

The Portal’s AS Java can contain an Adobe Document Services instance, so Portal and ADS may be shared on one AS Java instance

SAP NW Java 7.02

Adobe Document Services

(20)

SAP NetWeaver 7.02 Search & Classification

SAP NetWeaver 7.02 Search & Classification may be used for searching documents attached to objects in some GRC

solutions, such as Process Control or Risk Management SAP recommends a TREX instance for the GTS function

Sanctioned Party List Screening

Access Control does not make use of this search functionality

SAP NetWeaver 7.02 Search/Classification

GRC Search

(21)

Content

•

GRC 10.0 Technical Architecture

•

Pre-installation Information

(22)

Installation Prerequisites – Server

NetWeaver AS ABAP 7.02 SP6 or higher For details please refer to the PAM:

 http://service.sap.com/pam

Install Guide for NetWeaver 7.02:

(23)

Installation Prerequisites – Back-end

For ERP systems that will install Access Control Plug-In the following prerequisites must be met:

 For SAP ERP system 4.6C, the system must be at SAP_BASIS Support Pack 55

 For SAP ERP 4.70 system, the system must be at SAP_BASIS Support Pack 63

 For ERP 2004 system, the system must be at SAP_Basis Support Pack 18

 For ERP 6.0 system, the system mut be at SAP_BASIS Support Pack 13

For NetWeaver systems that will install Access Control Plug-In the following prerequisites must be met:

 For SAP Basis 4.6C, the system must be at SAP_BASIS Support Pack 55

 For NW 6.20 system, the system must be at SAP_BASIS Support Pack 63

– For NW 7.01, the system must be at SAP_BASIS Support Pack 02

– For NW 7.02, the system must be at SAP_BASIS Support Pack 01

(24)

Installation Prerequisites – Client

• The front-end needs a web browser or (optionally) a client installation of the NetWeaver Business Client 3.0 (“NWBC” - see SAP Note 1029940)

• Minimum SAPGUI 7.10 PL15 or higher for customizing and administration tasks, however SAPGUI 7.20 is recommended due to end-of-maintenance* of SAPGUI 7.10, see SAP Note 147519

• Adobe Flash 10 plug-in for GRC dashboards (for the browser and/or NWBC)

• Crystal Reports Adapter for viewing (GRC) Crystal Reports, see SAP Note

1353044

• Adobe Acrobat Reader 9 optional for filling offline forms (e.g. in PC)

• For details please refer to the PAM:

– http://service.sap.com/pam

(25)

Where to obtain the GRC 10.0 software

http://service.sap.com/swdc

(26)

Content of the Installation ZIP

The GRC 10.0 Installation ZIP file “01200314692000001255.zip“ contains the following structure:

GRC 10.0 ABAP add-on

Content Lifecycle Management ABAP add-on

GRC 10.0 Java Components (Portal

Content, AC 5.3 Migration Tool and AC Portal plug-in)

AC/PC ERP plug-ins

(with back-end R/3 or ERP version e.g. “46C“ or “700“)

AC ERP plug-ins

(27)

Access Control Installation Notes

Installation Notes

SAP Note 1490996: Install SAP GRC Access Control 10.0 on SAP NW 7.02

SAP Note 1500168: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 46C NW

SAP Note 1497971: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 620 NW

SAP Note 1503749:Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 710 NW

SAP Note 1500169: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 46C ERP

SAP Note 1497972: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 620 ERP

SAP Note 1501880: Install SAP GRC Access Control 10.0 Plug-In on SAP BASIS 640 ERP

(28)

Process Control and Risk Management Installation Notes

See SAP Notes for implementing SAP BusinessObjects Process Control 10.0:

SAP Note 1509999- Installing SAP GRC Shared Components 10.0

SAP Note 1510000- Upgrading to SAP GRC Shared Components 10.0

SAP Note 1510001- Installing SAP POA Shared Business Components

SAP Note 1510002- Installing SAP GRC Portal 10.0

SAP Note 1510053- Install/Upgrade RTA for GRC Process Control 10.0

SAP Note 1510055- Upgrading SAP NW with GRC 10.0 Plugin for Process Control

SAP Note 1503796- Release Restrictions for GRC Process Control 10.0

SAP Note for implementing SAP BusinessObjects Risk Management 10.0: SAP Note 1486768- SAP GRC RM 10.0 Release Restriction Note

Note: ERP 4.6C is not supported for Continuous Monitoring (Sub scenario Configurable) in PC 10

(29)

Where to find the GRC 10.0 Documentation (1)

(30)

Where to find the GRC 10.0 Documentation (2)

(31)

Where to find the GRC 10.0 Documentation (3)

(32)

Additional Documentation on BPX

(33)

Support via Customer Messages

Customer Support

If you experience problems with the installation or any other aspect of Access Control 10.0, create a customer message on the SAP Service Marketplace at

http://service.sap.com/message using the following components:

GRC-SAC for Access Control GRC-SPC for Process Control GRC-RM for Risk Management

XAP-SBC for Content Lifecycle Management

Please prefix the short text of your Access Control customer message with “RUAC10”, e.g. short text “RUAC10: provisioning error“

(34)

Content

•

GRC 10.0 Technical Architecture

•

Pre-installation Information

(35)

Installation of Main Components of

AC/PC/RM 10.0

General Steps:

1. Main installation components:

 GRCFND_A

2. Download the installation packages from Service Marketplace

3. Install with the transaction SAINT

4. Follow the detailed instructions from the SAP Note 1490996

(36)

Installation of Plug-In for AC/PC 10.0 on ERP

General Steps:

 GRCPINW

 GRCPIERP

2. Download the installation packages from SMP

4. Follow the detailed instructions from the SAP Notes 1500689 and 1500690

5. Apply the necessary Support Packages if there is any

Note: Plug-Ins vary depending on back end ERP system.

Attention:The AC 10.0 plug-ins will upgrade any existing RTA from previous AC releases. This means that any AC instance on running 5.X will stop working after the plug-ins

(37)

Installation of GTS 10.0

General Steps:

1. Main installation component:

 SLL-LEG

(38)

Installation of Plug-In for GTS 10.0

General Steps:

1. Two main installation components:

 SLL_PI

(39)

Installation of NFe 10.0

General Steps:

 SLL-NFE

4. Follow the detailed instructions from install guide

(40)

Installation of POA Shared Business Components /

Content Lifecycle Management (1)

General Steps:

 GRFD_STRUCTURE

4. Follow the detailed instructions in the GRC 10.0 install guide (Chapter 10)

5. Apply the necessary Support Packages if there is any

(41)

Installation of POA Shared Business Components /

Content Lifecycle Management (2)

Notes:

• CLM is not supported in AC only installations for AC 10.0 SP3 and earlier SPs

• CLM works with

• AC 10.0 SP4 or higher

• PC 10.0 SP3 or higher

• RM 10.0 SP1 or higher

• GTS 10.0 SP1 or higher

(42)

No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP AG. The information contained herein may be changed without prior notice.

Some software products marketed by SAP AG and its distributors contain proprietary software components of other software vendors.

Microsoft, Windows, Excel, Outlook, and PowerPoint are registered trademarks of Microsoft Corporation.

IBM, DB2, DB2 Universal Database, System i, System i5, System p, System p5, System x, System z, System z10, System z9, z10, z9, iSeries, pSeries, xSeries, zSeries, eServer, z/VM, z/OS, i5/OS, S/390, OS/390, OS/400, AS/400, S/390 Parallel Enterprise Server, PowerVM, Power Architecture, POWER6+, POWER6, POWER5+, POWER5, POWER, OpenPower, PowerPC, BatchPipes, BladeCenter, System Storage, GPFS, HACMP, RETAIN, DB2 Connect, RACF, Redbooks, OS/2, Parallel Sysplex, MVS/ESA, AIX, Intelligent Miner, WebSphere, Netfinity, Tivoli and Informix are trademarks or registered trademarks of IBM Corporation.

Linux is the registered trademark of Linus Torvalds in the U.S. and other countries. Adobe, the Adobe logo, Acrobat, PostScript, and Reader are either trademarks or registered trademarks of Adobe Systems Incorporated in the United States and/or other countries.

Oracle is a registered trademark of Oracle Corporation.

UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group.

Citrix, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, and MultiWin are trademarks or registered trademarks of Citrix Systems, Inc.

HTML, XML, XHTML and W3C are trademarks or registered trademarks of W3C®, World Wide Web Consortium, Massachusetts Institute of Technology.

Java is a registered trademark of Sun Microsystems, Inc.

JavaScript is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape.

SAP, R/3, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and other countries.

Business Objects and the Business Objects logo, BusinessObjects, Crystal Reports, Crystal Decisions, Web Intelligence, Xcelsius, and other Business Objects products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Business Objects Software Ltd. Business Objects is an SAP company.

Sybase and Adaptive Server, iAnywhere, Sybase 365, SQL Anywhere, and other Sybase products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of Sybase, Inc. Sybase is an SAP company.

All other product and service names mentioned are the trademarks of their respective companies. Data contained in this document serves informational purposes only. National product specifications may vary.

The information in this document is proprietary to SAP. No part of this document may be reproduced, copied, or transmitted in any form or for any purpose without the express prior written permission of SAP AG.

This document is a preliminary version and not subject to your license agreement or any other agreement with SAP. This document contains only intended strategies, developments, and functionalities of the SAP® product and is not intended to be binding upon SAP to any particular course of business, product strategy, and/or development. Please note that this document is subject to change and may be changed by SAP at any time without notice. SAP assumes no responsibility for errors or omissions in this document. SAP does not warrant the accuracy or completeness of the information, text, graphics, links, or other items contained within this material. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of

merchantability, fitness for a particular purpose, or non-infringement.

SAP shall have no liability for damages of any kind including without limitation direct, special, indirect, or consequential damages that may result from the use of these materials. This limitation shall not apply in cases of intent or gross negligence.

GRC 10.0 Pre-Installation