sapsecuritygrctrainings.com

Sixteen modules, from landscape basics to consultant level

Each module combines concept sessions, live system demonstrations and guided lab exercises. Expand a module to see what it covers.

Modules

16

Track

Security + GRC

Delivery

Live instructor-led

Labs

Individual system access

Project

End-to-end simulation

Recordings

Lifetime access
  • SAP ecosystem, ECC vs S/4HANA, system landscape
  • Client / instance architecture and transport layers
  • Role of a Security & GRC consultant in a project
  • SU01, SU10, mass user maintenance and user types
  • Password policies, parameters and licence data
  • CUA (Central User Administration) concepts
  • Authorization objects, fields, checks and traces
  • Single, derived, composite and reference roles
  • PFCG end-to-end role building methodology
  • Menu, authorizations, org levels and generation
  • Role transport, upload/download and mass changes
  • SU24, SU22 and proposal maintenance
  • SU53, ST01 and STAUTHTRACE analysis
  • Missing authorization resolution workflow
  • Common failure patterns in production
  • S/4HANA differences from ECC security
  • Business roles, business catalogs and groups
  • Migration considerations for existing roles
  • Fiori architecture, launchpad and gateway
  • Catalogs, groups, spaces and pages
  • OData services, /IWFND/MAINT_SERVICE and troubleshooting
  • HANA users, roles and privileges
  • Analytic and object privileges, repository roles
  • Auditing and encryption fundamentals
  • Analysis authorizations (RSECADMIN)
  • InfoObject and InfoProvider level security
  • Reporting authorization design
  • GRC 10.x / 12.0 components and landscape
  • Post-installation, connectors and plug-ins
  • Common configuration parameters
  • Rule set, functions, risks and mitigation controls
  • Risk analysis at user, role and org level
  • Remediation vs mitigation strategy
  • Firefighter IDs, owners and controllers
  • Centralized and decentralized firefighting
  • Log review and audit reporting
  • Role methodology and role import
  • Role mass maintenance and approval workflow
  • Naming conventions and governance
  • End user access request process
  • MSMP workflow and BRF+ rules
  • Provisioning, escalation and approvals
  • SOX, SoD and audit expectations
  • Security audit log (SM19/SM20) and RSUSR reports
  • Preparing evidence for auditors
  • Ticketing, SLA, change management and CTS
  • Go-live, cutover and hypercare activities
  • End-to-end project simulation with documentation

Reserve your seat in the launch batch

Talk to us directly about the syllabus, batch timings and fee structure. No forms, no waiting – call or message and get answers today.