Proactively balance risk and opportunity with SAP solutions for Governance, Risk and Compliance. Learn how a leading high tech manufacturer migrated to SAP GRC 10.1 from VIRSA 4.0 in 16 weeks

1. SAP Solutions for Governance,
Risk and Compliance
Wise Men Confidential
www.wisemen.com | info@wisemen.com | +1 281-953-4500
Rajendra Ponangi (Raj)
SAP BASIS & GRC PRACTICE HEAD
July 13, 2016

2. Wise Men Confidential
Agenda
 Introduction- Speakers
 Company Background
 SAP GRC Overview
 Wise Men SAP GRC Capabilities
 SAP GRC Implementation / Upgrade & Support Services.
 Customer Case Studies
 GRC Migration Process Flow
 Q & A
2

3. Wise Men Confidential
Speaker Profile
Rajendra Ponangi (Raj),
Head SAP BASIS & GRC Practice, Wise Men
Rajendra Ponangi is an industry leader with over 10+ years of
experience in SAP BASIS & GRC Support, Implementations, Upgrades.
He currently heads the SAP BASIS & GRC Practice. He has the best of
vertical knowledge in Manufacturing, Energy & Utilities, Pharma,
FMCG, and Automotive sectors.
3

4. Company Background
Wise Men Confidential

5. Wise Men Confidential
• Integration and Information Strategy and blue prints
• Business Process Automation
• SOA / EAI / B2B / EDI / DI / ETL / DQ / MDM
• TIBCO, Informatica, Oracle Fusion, SAP PI, GIS
Integration
platform Services
• SAP & Oracle
• Custom application development
• Modernization, Testing & Legacy Migration
• Application Management Services
Application
Services
• Infrastructure / Middleware Management Services
• Helpdesk, Incident Management, Problem management
• Middleware Migration Services
• 24/7 Database, Linux services
• Solution manager based SAP help desk
Managed
Services
19+
Years in the
industry
8+
600+
Vertical specializations
3Locations across
the globe
Employees globally
Offerings
5

6. SAP Governance, Risk and Compliance
Wise Men Confidential

7. Wise Men Confidential
SAP solutions for Governance, Risk, and Compliance
Business Challenges
• Introduce a unified, enterprise-wide
approach to managing access risk
• Increase business and IT
collaboration
• Reduce time and cost of audits
• Facilitate streamlined, cost-effective
processes for dealing with audit and
fraud issues
• Eliminate the need for manual
provisioning
8

8. Wise Men Confidential
SAP solutions for Governance, Risk, and Compliance
SIMPLIFY
GAIN
INSIGHT
STRENGTHEN
Automation
Integration
SAP
Monitor
Visualize
Predict
Anticipate
Prepare
Respond
Proactively balance risk and opportunity
Simplify governance, risk and compliance by integrating GRC activities into your
underlying business processes
Gain insight to help make better decisions visualizing and predicting how risk may
impact performance
Strengthen the business by employing the right combination of GRC solutions
8

9. Wise Men Confidential
SAP solutions for Governance, Risk, and Compliance
Manage, Protect, Perform
10

10. Wise Men Confidential
 Enhanced User Interface
 Context-Based side Panels
 Reporting and Dashboard
Authorizations
 Dashboard Drill Through and
Analysis
 Custom User Groups
 Remediation View
 New Access Request and Approval
Forms
 Org Rule Enhancements
 Decentralized Firefighting
 Operational Data Provider
 Role Search Personalization
 Plug-in Backward Compatibility
Enhanced Solution on GRC 10.x
11

11. Wise Men Confidential
Reporting Within GRC 10.x
Unified User Interface
12

12. Wise Men Confidential
Reporting Within GRC 10.x
13

13. Wise Men Confidential
SAP GRC Solution Deployment Options
13
PHASE 1
Phase2
Phase 3
Access Risk
Analysis SoD
Emergency Access
Management
Ruleset Optimization
& Reporting
Super User
Management
Access Request
Management
User Access
Review
Automated
Provisioning
Automated
Reporting
Business Role
Management
Security Change
Management
SAP PC/RM
Integration
Automated
Controls

14. Wise Men Confidential
SAP GRC Solution Deployment Options - Detailed
14
Access Risk
Analysis SoD
Emergency Access
Management
Ruleset Optimization
& Reporting
Super User
Management
Access Request
Management
User Access
review
Automated
Provisioning
Automated
Reporting
Security Change
Management
SAP PC/RM
Integration
Automated
Controls
RISK
Business Role
Management
Automated
Alerts
Automated
Provisioning
Other Process
Provisioning
BRF+External Triggers
Custom Request Forms
Policy / Process Control
PHASE 1
PHASE 2
PHASE 3

15. Wise Men Confidential
Solution Enhancements
 Additional reports and dashboards that enable high-speed
collection and review of key issues related to access
control, policy control, and risk management
 Device-agnostic report presentation
 Use of reporting tools in SAP software to construct
comprehensive and flexible GRC reports
Key Benefits
 High-volume processing of GRC data
 Accelerated reporting for faster review and action
 Review analytics information on any device – desktop or
mobile.
SAP GRC Connectors for SAP HANA – GRC 10.1
16

16. Wise Men Confidential
SAP GRC – SAP PAM
GRC 5.3
 End of Mainstream Maintenance-12/31/2015
GRC 10.0
 End of Mainstream Maintenance-12/31/2020
GRC 10.1
 Ready for SAP HANA
 End of Mainstream Maintenance-
12/31/2020
17

17. Wise Men SAP BASIS & GRC Capabilities
Wise Men Confidential

18. Wise Men Confidential
SAP Architecture Management
 Implementation / Support SAP Architecture to meet changes in business like Cluster Configuration,
Virtualizations
VMWare, MSCS, HP, IBM AIX
SAP ABAP & JAVA Application Support
 Experts in implementation of stack level technical environment
 Stack level migration requests
 JAVA stack to ABAP stack migration
SAP Security GRC & SOD
 Business requirement analysis, SoD configuration, FF configuration (Centralized / Decentralized user
Management), Mitigation/Risk management configurations, Notification alert management
 Experts in GRC 5.3 JAVA stack migration to ABAP Stack.
 SAP Standard Workflow, BRF+ configuration, custom workflow configurations
Wise Men SAP GRC Capabilities
19

19. Wise Men Confidential
SAP Product and Service Support
 End to End SAP Installations, SAP Version Upgrades, SAP Add-on implementations, Support services.
 GRC, ECC, Solution Manager, BI, BODS, SMP, EWM, TM, CRM, SCM, HANA…
SAP Implementation & Support Operations
 Managing hardware & OS software installation & configuration related to SAP.
 Administering / Supporting OS file systems & OS security in relation to SAP.
Engineering and Technical Support Services
 Identify and correct potential performance, reliability, capacity, security and fail-over issues before
they go into production, Execute any projects to upgrade the SAP software products.
 Collaborate with the Key Technology Providers.
Wise Men SAP GRC Capabilities
22

20. GRC Migration Process Flow
Wise Men Confidential

21. Wise Men Confidential
Migration Pre-requisites - SAP Access Control from VIRSA 4.x / 5.x to 10.x
GRC Migration Process Flow
22

22. Wise Men Confidential
Export Process Steps in VIRSA 4.x / GRC Access Control 5.x
GRC Migration Process Flow
23

23. Wise Men Confidential
Import Process Steps in GRC Access Control 10.x
GRC Migration Process Flow
24

24. Wise Men Confidential
Workflow & Notification Customization in GRC Access Control 10.x
GRC Migration Process Flow
25

25. Wise Men Confidential
GRC Access Control 10.x – User Access Management & Access Risk Analysis
GRC 10.x User Interface
26

26. Wise Men Confidential
GRC Access Control 10.x - Emergency Access Management
GRC 10.x User Interface
27

27. Customer Case Study
Wise Men Confidential

28. Wise Men Confidential
Customer Case Study - I
28
Company
SAP Standard GRC Migration tool along with GRC Expert configurations and consulting process
SAP GRC 5.3 JAVA, GRC 10.1 ABAP, ECC 6.0
10 weeks
Leader in the design, manufacture and supply of memory and storage solutions
Project
Objective
Benefits to
Customer
Process
Technologies
Project
Timeline
GRC Migration Project [GRC 5.3 JAVA stack to GRC 10.1 ABAP Stack]
Asses existing configurations of SAP GRC 5.3 system and Migrate to SAP GRC 10.1 ABAP Stack
Highlights
• Migration / Upgrade of GRC DEV and PRD systems from ‘5.3 SP11 Java Stack’ to ‘10.1 ABAP Stack’.
• Data export of Super User Privilege Management (SPM) data from AC 5.3 (ABAP).
• Data export of Compliant User Provisioning (CUP), Risk Analysis & Remediation (RAR), and
Enterprise Role Management (ERM) data from AC 5.3 (Java).
• Data import into Access Control 10.1.
• Customer activated Rule Set to be analyzed.
• The existing configured workflows in 5.3 will be analyzed and migrated / recreated to 10.1
• Process of managing and validating user access to applications and the data was streamlined
• Automated user provisioning which simplifies & helps to certify the access
• Enabled the embedded preventative policy checks
• Monitored reviews of emergency access activities

29. Wise Men Confidential
Customer Case Study - II
29
Company
• Process of managing and validating user access to applications and the data was streamlined
• Automated user provisioning which simplifies & helps to certify the access
• Enabled the embedded preventative policy checks
• Monitored reviews of emergency access activities
SAP Standard GRC Migration tool along with GRC Expert configurations and consulting process
VIRSA 4.0, GRC 10.1 ABAP, ECC 6.0, BI, GTS
16 weeks
Provider of critical products and materials used in advanced high-technology manufacturing.
Project
Objective
Benefits to
Customer
Process
Technologies
Project
Timeline
GRC Migration Project [VIRSA 4.0 to GRC 10.1 ABAP Stack]
Asses existing configurations of SAP VIRSA 4.0 system and Migrate to SAP GRC 10.1 ABAP Stack
Highlights
• Migration / Upgrade of GRC DEV and PRD systems from ‘VIRSA 4.0’ to ‘10.1 ABAP Stack’.
• Data export of Super User Privilege Management (SPM) data from VIRSA 4.0 SYSTEM.
• Data export of Risk Analysis & Remediation (RAR) data from VIRSA 4.0 SYSTEM.
• Data import into Access Control 10.1.
• Customer activated Rule Set to be analyzed.
• The existing configuration in VIRSA 4.0 were analyzed and migrated & required new workflow was
created to 10.1

30. 30
 Simplify governance, risk and compliance by integrating GRC activities into your underlying business processes
 Gain insight to help make better decisions visualizing and predicting how risk may impact performance
 Strengthen the business by employing the right combination of GRC solutions

31. Copyrights 2015. Wise Men. All Rights Reserved.
Downtown Office
1010 Lamar Ste 550
Houston, TX 77002
O: +1 281-953-4500
Global Delivery Center
8-2-596/C/4 & 8-2-596/C/5
Ascent Towers, Floor No. 4 & 5
Road No: 10, Banjara Hills
Hyderabad – 500034, India
O: +91 40 4036 3344
Headquarters
1500 S Dairy Ashford Ste 285
Houston, TX 77077
O: +1 281-679-6740
Thank You
www.wisemen.com
info@wisemen.com
+1 281-953-4500