This IT project is part of our digitalization and optimization of our customers’ IT landscape. Through targeted measures, we promote technological progress, optimize cross-system processes and create a sustainable basis for future developments. Our IT reference projects serve as a basis for orientation. They support the reusability of tried and tested concepts as part of project implementation.
This is one of 4822 IT projects that we have successfully completed with our customers.How can we support you?
Audit Support – SoD Controls
Project duration: 11 months
Brief description
The customer uses a global solution for the segregation of duties (SoD). This is based on the SAP solution GRC (Government – Risk – Compliance).
Supplement
The customer has a distinct SAP landscape. The SAP role model is used for authorisation management. In addition to basic knowledge of the standard FI processes, knowledge of the basic SD and MM processes is necessary. For supplier master data maintenance, there is an SRM system upstream of the ERP system. In addition to the controls in the ERP system, controls also exist in the HCM system.
Subject description
Access controls – i.e. internal controls – are used to detect critical tasks/activities in SAP systems but also in upstream or downstream IT systems, which do not necessarily have to be SAP systems. If critical actions are discovered, they must be checked and evaluated. There are different checks that have to be carried out monthly, quarterly, semi-annually or annually. The SAP SoD Dashboard, which is used globally, is at the centre. User conflicts can be detected here. User conflicts can be resolved by separating them, i.e. withdrawing authorisations from the users in the form of roles, or by mitigating them, i.e. it is possible to defuse the conflicts. An SoD violation can be detected via a mitigating control and is therefore also traceable.
IT project data
- Industries pharmaceutical industry
- Specialist tasks authorization management, Revision, Risk Management
- DP tasks standard software support
- System environments Client/Server
- Procedure model ASAP (SAP)
- Standard software and BI SAP GRC, SAP R/3
Project period01.12.2021 - 31.10.2022
Customers who trust us
