How much security have you done in the last 3 years? GRC specialization has everything to do with defining roles and segregation of duties and very little to do with installation of GRC software. Installation would typically be done by a Basis generalist. If you're wanting to "specialize" in the installation part, you're probably out of luck. There's not enough different about the GRC installation to merit specialization. If you want to be a "GRC specialist", then you'll want to study up on Sarbannes-Oxley requirements and brush up on your consulting skills since you'll be interviewing a bunch of end users and subject matter experts in order to come up with the correct roles and workflow to handle authorization approvals.
I recommend you start following the conversations and reading documents from the http://scn.sap.com/community/grc community in order to get a better feel for GRC before trying to switch specializations.
For the last 6 months, i have tasked with roles & authorisation assignments. Yes u r right, i am mainly associated with installation part..Little (not much) i know about SOX & SOD compliance
But , now i have set my mind to switch on SAP GRC, Would u let me know any website to study or gather information about SAP GRC, I would appreciate u!!!
Meanwhil, starting conversation on link provided by you
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.