sap analytics forum - integrc
TRANSCRIPT
SAP Analytics Forum 2013 28-02-2013
© Integrc 1
Werner van Haelst 28 februari 2013
Analytics met SAP GRC – een(r)evolutie !
SAP Analytics Forum Nederland 2013
Introductie
‘In control’ met SAP GRC
Traditionele aanpak
Analytics met SAP GRC
Afronding
Agenda
SAP Analytics Forum 2013 28-02-2013
© Integrc 2
IntroductieNetherlands
UK
DubaiBangalore
Singapore
In January 2012 two of the leading GRC consulting firms, CSI and su53,merged to become Integrc – the world’s largest independent provider ofGRC services dedicated to SAP.
Integrc is an independent company that provides Governance, Riskmanagement, Compliance and Security services to companies that runSAP.
Integrc NetherlandsBruistensingel 124, Den Bosch
drs. Werner van Haelst RE RA
Managing Director Tel. +31 (0)73 640 87 50Mob. +31 (0)6 52 333 149E-mail: [email protected]: www.integrc.com
Netherlands
UK
DubaiBangalore
Singapore
Integrc Global Support Centres in Belfast & BangaloreLower day rate nearshore cost modelGRC & Security support & operationsInnovation
Integrc GRC LabPre-sales GRC demos, training, validationFast prototype/rapid deployment
Integrc packaged controls contentRapid deployment of control automationBest practice risks/controls pre-configuredRDS GRC solutions
IntroductieInnovatie
Integrc AppsMobile app for Risk Management
Interactive GRC DashboardsPowerful visual management reportingBoosts adoption of GRC investment
SAP Analytics Forum 2013 28-02-2013
© Integrc 3
‘In control’ met SAP GRC
‘In control’ met SAP GRCAanleiding
The organisation‘in control’
‘Trust me’ ‘Tell me’ ‘Show me’
SAP Analytics Forum 2013 28-02-2013
© Integrc 4
‘In control’ met SAP GRCGeïntegreerde aanpak vereist
Managing with confidence is difficult in an increasingly complex world
Getting in control with an integrated approach
‘In control’ met SAP GRCEn hoe helpt SAP GRC daarbij?
SAP Analytics Forum 2013 28-02-2013
© Integrc 5
Traditionele aanpak
Traditionele aanpakProces – risico - beheersingsmaatregel
SAP Analytics Forum 2013 28-02-2013
© Integrc 6
Traditionele aanpakProces – risico - beheersingsmaatregel
User ITorganisation organisation
Segregation ofduties
UserControls
General ITControls
ApplicationControls
Configureerbare controles
o Standaard GRC (ABAP) controles
o Maatwerk GRC (ABAP) controles
o IMG settings via SPRO
o SE16N table view
Autorisatie controleso Rule set in Access Control; moet verfijnd
worden naar processen enorganisatorische entiteiten in eenorganisatie
o Standaard SAP functionaliteit (SUIM)
Reportages in SAPo Standard rapportages in SAP
(S_ALR_xxxxxxxxx)
o Klant specifeke reportages
Analytics met GRC
SAP Analytics Forum 2013 28-02-2013
© Integrc 7
Analytics met GRCContinuous Control & Transaction Monitoring !
Processes and Data
SoD
UserControls
General ITControls
ApplicationControls
ProcessDesign
Risk Analysis &Assessment
ControlsDesign
Monitoring
Analytics met GRCTransactional data analysis – een voorbeeld
SAP Analytics Forum 2013 28-02-2013
© Integrc 8
Analytics met GRCControl – Data Source
Analytics met GRCTransactional data analysis – business logic & deficiency criteria
SAP Analytics Forum 2013 28-02-2013
© Integrc 9
Analytics met GRCControl – Automatic Scheduler
Analytics met GRCControl – Reporting by exception
Exception details are shown (ECC - MSEG table!)
Clicking the WF link brings the test results
SAP Analytics Forum 2013 28-02-2013
© Integrc 10
Analytics met GRCReporting by exception – “Snapshot”
Analytics met GRCReporting by exception – Fact finding in ECC (172K write-off)
SAP Analytics Forum 2013 28-02-2013
© Integrc 11
SAP Analytics Forum 2013 28-02-2013
© Integrc 12
Analytics met GRCAnd there’s more to come: SAP HANA !
Afronding
SAP Analytics Forum 2013 28-02-2013
© Integrc 13
‘In control’ komen én blijven vereist een geïntegreerde aanpak
SAP GRC beschikt over functionaliteit om dit adequaat teondersteunen
Evolutieproces is gaande:
van ‘Excel’ based naar ‘tool based’
van off-line naar on-line
van ‘configuration monitoring’ naar ‘transaction monitoring’
Analytics met SAP GRC is dus al mogelijk en zal met toepassing vanSAP HANA een grote vlucht nemen (revolutie)!
Afronding
QuestionsQuestions
SAP Analytics Forum 2013 28-02-2013
© Integrc 14
Disclaimer Integrc
The provided documents, presentations and/or other informationcontains confidential/privileged information and is solely intended forthe intended recipient. All provided information, in whatever shape or
form, including texts, pictures, video and audio material, software,etc. (hereafter the “Information”), is considered part of the copyright(“auteursrecht”) and/or confidential business information of Integrc
Netherlands B.V. Use of the information is solely intended andallowed for the personal use by the recipient. Communication to thepublic and/or copying of the Information for commercial purposes is
expressly forbidden. No part of the information, in whole or part, maybe communicated to the public and/or copied without the written
approval of Integrc Netherlands B.V.