Wise Men Webinar: Fast Track Implementation of SAP GRC 10.1

SAP Solutions for Governance, Risk and Compliance

Wise Men Confidential

www.wisemen.com | [email protected] | +1 281-953-4500

Rajendra Ponangi (Raj) SAP BASIS & GRC PRACTICE HEAD

July 13, 2016

mailto:[email protected]


Agenda

Introduction- Speakers

Company Background

SAP GRC Overview

Wise Men SAP GRC Capabilities

SAP GRC Implementation / Upgrade & Support Services.

Customer Case Studies

GRC Migration Process Flow

Q & A

2


Speaker Profile

Rajendra Ponangi (Raj),

Head SAP BASIS & GRC Practice, Wise Men

Rajendra Ponangi is an industry leader with over 10+ years of experience in SAP BASIS & GRC Support, Implementations, Upgrades. He currently heads the SAP BASIS & GRC Practice. He has the best of vertical knowledge in Manufacturing, Energy & Utilities, Pharma, FMCG, and Automotive sectors.

3

Company Background



• Integration and Information Strategy and blue prints

• Business Process Automation

• SOA / EAI / B2B / EDI / DI / ETL / DQ / MDM

• TIBCO, Informatica, Oracle Fusion, SAP PI, GIS

Integration platform Services

• SAP & Oracle

• Custom application development

• Modernization, Testing & Legacy Migration

• Application Management Services

Application Services

• Infrastructure / Middleware Management Services

• Helpdesk, Incident Management, Problem management

• Middleware Migration Services

• 24/7 Database, Linux services

• Solution manager based SAP help desk

Managed Services

19+ Years in the industry

8+

600+

Vertical specializations

3 Locations across the globe

Employees globally

Offerings

5

SAP Governance, Risk and Compliance



SAP solutions for Governance, Risk, and Compliance

Business Challenges • Introduce a unified, enterprise-wide

approach to managing access risk • Increase business and IT

collaboration • Reduce time and cost of audits • Facilitate streamlined, cost-effective

processes for dealing with audit and fraud issues

• Eliminate the need for manual provisioning

8



SIMPLIFY

GAIN INSIGHT

STRENGTHEN

Automation

Integration

SAP

Monitor

Visualize

Predict

Anticipate

Prepare

Respond

Proactively balance risk and opportunity

Simplify governance, risk and compliance by integrating GRC activities into your underlying business processes

Gain insight to help make better decisions visualizing and predicting how risk may impact performance

Strengthen the business by employing the right combination of GRC solutions

8



Manage, Protect, Perform

10


Enhanced User Interface

Context-Based side Panels

Reporting and Dashboard

Authorizations

Dashboard Drill Through and

Analysis

Custom User Groups

Remediation View

New Access Request and Approval

Forms

Org Rule Enhancements

Decentralized Firefighting

Operational Data Provider

Role Search Personalization

Plug-in Backward Compatibility

Enhanced Solution on GRC 10.x

11


Reporting Within GRC 10.x

Unified User Interface

12


Reporting Within GRC 10.x

13


SAP GRC Solution Deployment Options

13

PHASE 1

Phase2

Phase 3

Access Risk Analysis SoD

Emergency Access Management

Ruleset Optimization & Reporting

Super User Management

Access Request Management

User Access Review

Automated Provisioning

Automated Reporting

Business Role Management

Security Change Management

SAP PC/RM Integration

Automated Controls


SAP GRC Solution Deployment Options - Detailed

14

Access Risk Analysis SoD

Emergency Access Management

Ruleset Optimization & Reporting

Super User Management

Access Request Management

User Access review


Automated Reporting

Security Change Management

SAP PC/RM Integration

Automated Controls

RISK

Business Role Management

Automated Alerts


Other Process Provisioning

BRF+ External Triggers

Custom Request Forms

Policy / Process Control

PHASE 1

PHASE 2

PHASE 3


Solution Enhancements

Additional reports and dashboards that enable high-speed

collection and review of key issues related to access

control, policy control, and risk management

Device-agnostic report presentation

Use of reporting tools in SAP software to construct

comprehensive and flexible GRC reports

Key Benefits

High-volume processing of GRC data

Accelerated reporting for faster review and action

Review analytics information on any device – desktop or

mobile.

SAP GRC Connectors for SAP HANA – GRC 10.1

16


SAP GRC – SAP PAM

GRC 5.3

End of Mainstream Maintenance-12/31/2015

GRC 10.0

End of Mainstream Maintenance-12/31/2020

GRC 10.1

Ready for SAP HANA

End of Mainstream Maintenance-

12/31/2020

17

Wise Men SAP BASIS & GRC Capabilities



SAP Architecture Management Implementation / Support SAP Architecture to meet changes in business like Cluster Configuration,

Virtualizations

VMWare, MSCS, HP, IBM AIX

SAP ABAP & JAVA Application Support Experts in implementation of stack level technical environment

Stack level migration requests

JAVA stack to ABAP stack migration

SAP Security GRC & SOD Business requirement analysis, SoD configuration, FF configuration (Centralized / Decentralized user

Management), Mitigation/Risk management configurations, Notification alert management

Experts in GRC 5.3 JAVA stack migration to ABAP Stack.

SAP Standard Workflow, BRF+ configuration, custom workflow configurations


19


SAP Product and Service Support

End to End SAP Installations, SAP Version Upgrades, SAP Add-on implementations, Support services.

GRC, ECC, Solution Manager, BI, BODS, SMP, EWM, TM, CRM, SCM, HANA…

SAP Implementation & Support Operations

Managing hardware & OS software installation & configuration related to SAP.

Administering / Supporting OS file systems & OS security in relation to SAP.

Engineering and Technical Support Services

Identify and correct potential performance, reliability, capacity, security and fail-over issues before they go into production, Execute any projects to upgrade the SAP software products.

Collaborate with the Key Technology Providers.


22


Migration Pre-requisites - SAP Access Control from VIRSA 4.x / 5.x to 10.x


22


Export Process Steps in VIRSA 4.x / GRC Access Control 5.x


23


Import Process Steps in GRC Access Control 10.x


24


Workflow & Notification Customization in GRC Access Control 10.x


25


GRC Access Control 10.x – User Access Management & Access Risk Analysis

GRC 10.x User Interface

26


GRC Access Control 10.x - Emergency Access Management

GRC 10.x User Interface

27

Customer Case Study



Customer Case Study - I

28

Company

SAP Standard GRC Migration tool along with GRC Expert configurations and consulting process

SAP GRC 5.3 JAVA, GRC 10.1 ABAP, ECC 6.0

10 weeks

Leader in the design, manufacture and supply of memory and storage solutions

Project

Objective

Benefits to Customer

Process

Technologies

Project Timeline

GRC Migration Project [GRC 5.3 JAVA stack to GRC 10.1 ABAP Stack]

Asses existing configurations of SAP GRC 5.3 system and Migrate to SAP GRC 10.1 ABAP Stack

Highlights

• Migration / Upgrade of GRC DEV and PRD systems from ‘5.3 SP11 Java Stack’ to ‘10.1 ABAP Stack’. • Data export of Super User Privilege Management (SPM) data from AC 5.3 (ABAP). • Data export of Compliant User Provisioning (CUP), Risk Analysis & Remediation (RAR), and

Enterprise Role Management (ERM) data from AC 5.3 (Java). • Data import into Access Control 10.1. • Customer activated Rule Set to be analyzed. • The existing configured workflows in 5.3 will be analyzed and migrated / recreated to 10.1

• Process of managing and validating user access to applications and the data was streamlined • Automated user provisioning which simplifies & helps to certify the access • Enabled the embedded preventative policy checks • Monitored reviews of emergency access activities


Customer Case Study - II

29

Company

• Process of managing and validating user access to applications and the data was streamlined • Automated user provisioning which simplifies & helps to certify the access • Enabled the embedded preventative policy checks • Monitored reviews of emergency access activities

SAP Standard GRC Migration tool along with GRC Expert configurations and consulting process

VIRSA 4.0, GRC 10.1 ABAP, ECC 6.0, BI, GTS

16 weeks

Provider of critical products and materials used in advanced high-technology manufacturing.

Project

Objective

Benefits to Customer

Process

Technologies

Project Timeline

GRC Migration Project [VIRSA 4.0 to GRC 10.1 ABAP Stack]

Asses existing configurations of SAP VIRSA 4.0 system and Migrate to SAP GRC 10.1 ABAP Stack

Highlights

• Migration / Upgrade of GRC DEV and PRD systems from ‘VIRSA 4.0’ to ‘10.1 ABAP Stack’. • Data export of Super User Privilege Management (SPM) data from VIRSA 4.0 SYSTEM. • Data export of Risk Analysis & Remediation (RAR) data from VIRSA 4.0 SYSTEM. • Data import into Access Control 10.1. • Customer activated Rule Set to be analyzed. • The existing configuration in VIRSA 4.0 were analyzed and migrated & required new workflow was

created to 10.1

30

Simplify governance, risk and compliance by integrating GRC activities into your underlying business processes

Gain insight to help make better decisions visualizing and predicting how risk may impact performance

Strengthen the business by employing the right combination of GRC solutions

Copyrights 2015. Wise Men. All Rights Reserved.

Downtown Office 1010 Lamar Ste 550 Houston, TX 77002 O: +1 281-953-4500

Global Delivery Center 8-2-596/C/4 & 8-2-596/C/5 Ascent Towers, Floor No. 4 & 5 Road No: 10, Banjara Hills Hyderabad – 500034, India O: +91 40 4036 3344

Headquarters 1500 S Dairy Ashford Ste 285 Houston, TX 77077 O: +1 281-679-6740

Thank You www.wisemen.com

[email protected] +1 281-953-4500

Wise Men Webinar: Fast Track Implementation of SAP GRC 10.1

Software

Transcript of Wise Men Webinar: Fast Track Implementation of SAP GRC 10.1