The global economy is evolving more rapidly than ever before, with recent events putting the rate of change into overdrive. Organizations are now operating remotely, and the new ‘work from home’ paradigm is presenting a different set of challenges for security and compliance teams. Security needs to be prioritized, and how organizations react to these challenges will be scrutinized by shareholders, stakeholders and auditors alike. During this session, we will discuss the SAP security and compliance challenges organizations are facing in today’s ever-changing environment.

Many companies are still struggling with audit findings regarding critical access rights and segregation of duty breaches in their SAP environments. This is often caused by a lack of understanding of the SAP authorization concept, and can also be caused by the complexity of the SAP authorization concept itself. As many organizations will move to S/4HANA in the near future, an investment in SAP authorizations is required. It’s important to get to a clean state before a possible move to S/4HANA. In this session, a standard segregation of duties risk remediation and mitigation approach will be presented.

Despite the introduction of GDPR, a 2019 study by Varonis found that 53% of companies had over 1,000 sensitive files that were accessible to every employee. Managing Access Risk is thus something all companies need to focus on. Two of our customers; Forfarmers and Endeavor, will share with us their experiences with GRC through their testimonials. Find out how they managed to address their different compliance challenges in a cost-effective and user-friendly way.

How do you proactively monitor SAP threat vectors in highly complex & distributed environments? Given our complex IT environments in 2020, monitoring SAP’s risk and revenue-impacting events is crucial for business security, fraud, system health and operations. This session will focus on key areas such as: How organizations mature their SAP security poster, levels 0 through 4; Watching users and discovering unusual behavior; Tracking transfers and changes to sensitive data and Monitoring critical KPIs.

Lessons learned over the last two years of GDPR compliance has taught us that GDPR compliance is more like a marathon than a sprint. In this session, a UK manufacturing client will present their case study, sharing the multiple steps and project waves taken towards GDPR compliance. These included deleting data subjects, complying with GDPR’s Right to Access and the Right to be Forgotten and securing non-production through data masking.

The impact of the Coronavirus (“COVID-19”) has caused numerous disruptions to workplaces around the globe. With orders to “stay at home” in place across the United States and around the world, many organizations have implemented remote working arrangements in addition to virtual online business interactions, creating data security, privacy and compliance concerns. Compliance projects take time to plan and execute, and getting your data privacy plan in place is becoming more urgent than ever. During this session, we will discuss the California Consumer Privacy Act, or CCPA, and how companies should prepare for what lies ahead during the pandemic and when the pandemic is over. We will show you practical steps that you can take now to extend your CCPA compliance project to your SAP systems.

SAP Production systems typically have thousands of users accessing them. How confident are you in the controls you have in place to keep your sensitive data secure within these systems? In this session we look at common loopholes that hackers could find to get access to your sensitive data. They find ways to circumnavigate your security protocols from within the system. Let us show you ways to prevent this and how to identify where these hacks are taking place. One surefire way to reduce these risks is to shrink your attack surface by anonymizing data in your test SAP systems. Join us as we share these tips and more.