You are on page 1of 25

SAP BusinessObjects Governance, Risk & Compliance (GRC) 10.

0 Technology

Live Expert Session


Installation Planning Frank Bannert RIG Applications EMEA (GRC)

Disclaimer

This presentation outlines our general product direction and should not be relied on in making a purchase decision. This presentation is not subject to your license agreement or any other agreement with SAP. SAP has no obligation to pursue any course of business outlined in this presentation or to develop or release any functionality mentioned in this presentation. This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or noninfringement. SAP assumes no responsibility for errors or omissions in this document, except if such damages were caused by SAP intentionally or grossly negligent.

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 2

Topics

1.System Landscape and Transports 2.Front End Components 3.Reporting Components 4.Integration 5.Migration 6.Installation Planning Checklist

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 3

System Landscape and Transport Planning:


Three Tier Recommended

ERP Back-End (Plug in) DEV

Transport

ERP Back-End (Plug in) QA

Transport

ERP Back-End (Plug in) PRD

GRC 10.0 DEV (ABAP)

Transport

GRC 10.0 QA (ABAP)

Transport

GRC 10.0 PRD (ABAP)

Portal(Optional) DEV (JAVA)

Transport

Portal(Optional) DEV (JAVA)

Transport

Portal(Optional) DEV (JAVA)

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 4

Standard Transport Mechanism


Portal Content Transport (Optional if Portal is used as front end)

NetWeaver Portal offers the option to transport portal content packages by exporting Transport Package files To transport the Portal content export the portal content package, choose System Administration Transport Transport Packages Export

ABAP Change and Transport System (CTS) is used for GRC10.0 ABAP back end

GRC 10.0 configuration and customizing objects are transported using the standard ABAP change and transport system.

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 5

Client Preparation

Activate PC and RM in a single client if PC-RM integration scenario needs to be implemented. To implement PC-AC integration using SOD rules, activate PC and AC in a single client. GTS and NFe can be activated in separate clients as there is no direct integration with PC, AC or RM for these components. Please refer to the sizing guide for each application to build adequate hardware in case of the multiple application activation in a single client.

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 6

Topics

1.System Landscape and Transports 2.Front End Components 3.Reporting Components 4.Integration 5.Migration 6.Installation Planning Checklist

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 7

NetWeaver Portal

In GRC10.0 NetWeaver Portal can be used as an optional front end. The Portal Content consists of one Portal Role and one iView, which shows the embedded NetWeaver Business Client (NWBC) view. The minimum version required for Portal is NW Portal 7.02 SP2.

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 8

Embedded NWBC

The embedded NWBC works on AS ABAP 7.02 Can also be called directly (without a Portal) through the transaction "nwbc in the GRC 10.0 ABAP back end.

Transaction code NWBC opens a browser window: Clicking the SAP GRC NWBC link in the transaction code NWBC opens the GRC entry point in the embedded NWBC

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 9

Embedded NWBC

The URL for the embedded NWBC is in the following format: http://<AS ABAP>:500<Instance Number>/nwbc

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 10

NWBC 3.0 Standalone NWBC

Before installing the stand alone NWBC 3.0 ensure the SAPGUI version is 7.20 After the installation add the connection to your local NWBC settings by selecting Personalize and Options from the menu:

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 11

Comparison of Different Front Ends of GRC10.0 Summary


Portal The Portal Content consists of one Portal Role and one iView and needs to be installed in AS Java side GRC10.0 Can be accessed through Portal Portal system connection needs to be configured Embedded NWBC Installed in the server side Standalone NWBC Locally installed in PC or laptop

Can also be called directly by transaction code No extra configuration is necessary

Can only be accessed by local NWBC application Connection details needs to be configured manually Need at least SAPGUI 7.20

Enterprise Portal 7.02 SP2 is needed

The embedded NWBC works as of AS ABAP 7.02

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 12

Topics

1.System Landscape and Transports 2.Front End Components 3.Reporting Components 4.Integration 5.Migration 6.Installation Planning Checklist

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 13

Report Output in GRC 10.0

GRC 10.0 has three different settings of report output, which you can set in the Personalize section.

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 14

Webdynpro ALV Reports

Webdynpro ALV report output

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 15

Webdynpro ALV Reports- Print via Generic Crystal reports


Displays the report as ALV (WebDynpro) and shows an option for printing (i.e. exporting) a Crystal Report. (This option uses the standard Crystal template as configured globally for the whole AS ABAP)

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 16

Crystal Reports (No Webdynpro)

Crystal report can be launched by changing the report output setting in personalization section. No additional server such as BOE is required. Customization of the reports can be done directly in GRC 10.0.

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 17

Comparison of Webdynpro vs. Crystal Reports Summary

Webdynpro Pre delivered within GRC 10.0; no additional server is required

Crystal No BOE server is required, layout setting can be changed to crystal in the personalized section of the Report output Layout change is fairly easy

Layout change options possible but are not as flexible as Crystal Reports Can be downloaded in Adobe and XLS format

Downloadable in xls,rtf,doc,RPT formats

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 18

Topics

1.System Landscape and Transports 2.Front End Components 3.Reporting Components 4.Integration 5.Migration 6.Installation Planning Checklist

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 19

GRC10.0 Integration Framework


[Intra GRC10.0,AC<->PC RFC+ PC<->RM ABAP Config based integration]

[SAP systems, RFCs, Queries] SAP ERP (4.6C 7.1)


NW Function Modules
(Plug-in: GRCPINW)

[web services]
optional

GRC10.0 AC GTS PC/RM NFE(E Signature)


SAP NetWeaver AS ABAP 7.02
GTS ONLY [RFC]

Identity Management Solutions (SAP or Non-SAP)

HR Function Modules PC Automated Ctrls


(Plug-in: GRCPIERP)

Required for Nota Fiscal Eletronica

GTS Plug-in
(Plug-in: SLL-PI)

SAP NetWeaver PI
Nota Fiscal Content

optional Non-SAP Business Applications


[NON SAP systems web services]

[RFC]

optional
[RFC]

optional optional
[eSOA Webservices]

SAP NetWeaver 7.02 Search/Classification GRC Search

SAP NetWeaver AS Java


Adobe Document Services

Transportation Management
optional
[RFC]

[RFC]

optional

SAP NetWeaver BW
GRC BI Content

SRM, HCM, FI

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 20

Plug-in Installation Planning


GRC 10.0 Suite

Access Control
ABAP

Process Control
ABAP

Risk Management
ABAP

Global Trade Services


ABAP

Nota Fiscal Eletronica


ABAP

NW Function Modules
(Plug-in: GRCPINW)

ERP Function Modules PC Automated Ctrls


(Plug-in: GRCPIERP)

GTS Plug-in
(Plug-in: SLL-PI)

3rd Party Adapter

SAP ERP Access Control / Process Control NW Plug-in Access Control / Process Control ERP Plug-in Global Trade Services

NW Function Modules
(Plug-in: GRCPINW)

HR Function Modules PC Automated Ctrls


(Plug-in: GRCPIERP)

GTS Plug-in
(Plug-in: SLL-PI)

Non-SAP Business Applications

Plan for plug in installation depending on the backend system.


SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 21

Topics

1.System Landscape and Transports 2.Front End Components 3.Reporting Components 4.Integration 5.Migration 3.Installation Planning Checklist

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 22

Upgrade & Migration Paths to GRC Suite v10.0

Access Control JAVA 5.2 Upgrade

Risk Management ABAP 2.0 Upgrade Current GRC Applications

Process Control ABAP

Global Trade Services ABAP 7.0 7.1 7.2

Nota Fiscal Electronica ABAP

ABAP 4.0 5.3 3.0 2.5 3.0

8.0

1.0

2.0

Migration

Migration

Upgrade

Upgrade

Upgrade

GRC v10.0 Suite Access Control Risk Management

ABAP Process Control Global Trade Services Services Nota Fiscal Electronica Electronica

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 23

Upgrade

Topics

1.System Landscape and Transports 2.Front End Components 3.Reporting Components 4.Integration 5.Installation Planning Checklist

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 24

GRC 10.0 Installation Planning Checklist

Identify System Landscape for GRC10.0 installation Check the Hardware System Requirements Check the Software /NetWeaver SW component Requirements Check if the correct GRC10.0 package is downloaded from Service Marketplace Check the important GRC10.0 Installation note and related notes

Install GRC10,0 according to the GRC10.0 installation guide and update with the latest Service Package
Activate the required specific subcomponents within GRC10.0 (AC/PC/RM/GTS/NFE)

SAP AG 2011 SAP BusinessObjects Governance, Risk, & Compliance (GRC) 10.0 Technology Topics / Page 25