Background:
A retail company for technical items was expanding SAP solution to new sites. Old SAP roles were not working well enough, and there were quite many audit findings related to them. A new approach was needed.
Service:
- New user roles were designed based on GRC Nordic template roles to ensure clean roles
- When provisioning the roles to users SoD’s were measured based on GRC Nordic Risk Library to find the conflicts. Conflict were resolved
- Monthly monitoring continues to keep the conflicts in agreed level
- Results are reported in decision making friendly format utilising GRC Nordic Service portal and it’s embedded workflows
Deliverables:
- New clean and technical appropriate user roles implemented
- Roles are matching to SAP’s enchanced named user categories
- Continuous monitoring in place
