Greetings Guru's,
We are on GRC PC 10.0 and I am trying to configure a monitoring rule to assist with preventing the risk of having custom tcodes slip into our production environment without being considered for our GRC SOD Rule Set. Have anyone had success doing this? If so, can you assist me in identifying the appropriate data source and business rule config?
The hope is to have a quarterly monitoring job report on new tcodes for the given period.
Considering tcodes reside in table TSTC/TSTCT, I would imagine one of these would be appropriate for the configurable data source with a change log business rule. Unfortunetly, I am missing something that is not allowing me to report on the additional custom tcodes that are being added.
I look forward to your thoughts.
Regards,
Nathan K.