Client Profile
Location: Singapore
Industry: Government
Our client is a leading IT service provider working on a project for a collection of government organisations in Singapore.
- Our client was responsible for the implementation of S/4 HANA, BW, Solution Manager and GRC for these government organisations.
- The greenfield approach was used in the implementation of S/4 HANA; consequently, we faced an added challenge of incorporating new and improved business processes.
- The scope of the implementation covered 4,000 users across these organisations, all under one company code.
- The authorisation-related portion of the implementation was subcontracted to XS Control. This also included all aspects of the GRC life cycle: Architecture, implementation and post-go live support.
- This reference case details the authorisation setup in the S/4 HANA implementation for one of the government organisations.
- A bespoke identity management solution was interfaced with SAP GRC for one department in the organisation.
Project Objectives
- To achieve a comprehensive authorisation roles framework in place, allowing for cost centre-segregated access provisioning.
- To implement GRC Access Control, ensuring ‘zero segregation of duties violations’ upon go-live and SoD-free access provisioning post go-live.
- To establish a seamless interface with Identity Management Solution.
Challenges and Opportunities
- Greenfield S/4 HANA was to replace legacy financial and logistic applications.
- The customer was new to SAP, therefore there was no past experience in ECC to leverage on.
- One company/one controlling area enterprise structure was used.
- As the customer was a government organisation, there were strict access policies and rules to comply with.
- GRC Access Control was to be implemented alongside S/4 HANA implementation.
Why XS Control
- Solid knowledge and experience in SAP authorisations and segregation of duties.
- We used best practice content for SAP role building and utilised our chosen tool MARC to test for and achieve segregation of duties in roles prior to implementation.
- Experience in implementing GRC Access Control in a government organisation.
Project Highlights
- Established role definition in alignment with Business Scenario/Business Process framework.
- Performed and passed pre-go live user/role assignment validations through GRC Access Control.
- Put in place process for post-go live access provisioning through GRC Access Control.
Project Benefits
- Leveraged on best practice role contents to ensure completeness of designed roles.
- Leveraged on SAP best practice SoD rules to ensure completeness of SoD rules configuration in GRC.
- Pre- and post-implementation support on roles and GRC.
Related Services
Access Framework
Through close collaboration with you, we identify access risks in your SAP processes and design the controls for them.
User Access Analytics
We analyse how well your SAP access complies with segregation of duties and critical access requirements, then present you with reporting in a format that works for you
Access Risk Remediation
We help you tackle access-related issues in your SAP system and devise long-term plans to manage your system
We would like to hear from you
Send us a message and we will get in touch with you!