Having issues in identifying tasks for Task Based Role approach

Hello All,

How we can identify tasks in business, as my Business don't know much about SAP.

How effective implementing Task based Security to Small Business, as they cant afford for GRC system. Whats the best approach for implementing this, is there any doc which supports this.

I tried to find different blogs to find the best way of implementing this approach, but no luck. Could you please help me with the approach.

Thanks,

Ch.