Research And Implementation Of SaaS-Based GRC Service On SAP System

This paper researches functionality, security and performance requirements of GRC service based on SAP systems and SaaS design mode additionally. Bases on these points, this paper adds SAP Portal platform, builds the integration framework of GRC service based on SAP systems, which is loosely coupled, clearly structured, high performance and security, low cost and abandons the complicated SAP implementation process. The following functions are implemented.Implement data performance optimization function. According to effective data archiving plan, the function archives the seldom used data from main database to a storage system which is of low cost, then deletes the archived data in main database and creates the index-based read program for the archived data. It can help not only saving the storage of main database but also the access performance of the archived data being considered.Implement quality evaluation of custom development objects function. The function gives the score of custom development objects in customers'SAP systems on muti-dimensions by scoring algorithm; calculates the statistics of custom program usage; supply with the details of performance and security optimization towards to custom development objects.Implement security access and control of user and roles function. Analyze the violations of users and roles according to SOD principle. Supply with details of violation on each violation item in order to eliminate security leak of SAP systems.Design and implement the service portal, which integrates the function of business consultant's GRC service maintenance and the function of responding to the customers'requirements of getting GRC service's analysis results.Function tests on above functions have been executed. The results prove that the design plan is feasible.There is hardly related literature of GRC software which is similar to this paper after author's searching, so the service this paper describes is valuable for researching and implementing GRC service based on SAP system.