STIB has achieved the required maturity level of operational SAP risk management

Freely translated

"In terms of operational SAP risk management we can say that today, we have achieved the required level of maturity in a relatively short time, thanks to the flexibility and the methodology of axl & trax. One of the key success factors for this project has been the constant balance between business continuity on one hand, and the adaptation of authorizations and all related risks on the other hand."

Omar Akabi
Solution Development Manager
STIB / MIVB

EFS - Segregation of Duties risks identification

EFS commented on the usage of CSI Authorization Auditor during the SoD project.

"This tool helps to identify the risk levels. It also allows us to link compliancy rules (type SOx and others) with the authorizations in SAP."

Nicolas Merlière
Directeur Adjoint de l'Audit et du Pilotage Stratégique

For EFS, who wished to approach the standard, this solution also allowed the implementation of normalized rules, categorized by importance, while incorporating these rules.

"This way, we were better equipped to identify the conflicts, allowing us to make a systemic analysis with a solid tool while, among other things, taking the authorization objects into account. Therefore, we reinforce the separation of duties while securing our processes."

Jean-Nicolas Maupain
Auditeur lnterne à la Direction de l'Audit et du Pilotage Strategique

EFS - Etablissement Français du Sang - French Blood Establishment

AMI Semiconductor

AMI Semiconductor, a US-based public company, required a very secure setup for all their IT systems.

"During my more than 10 years of experience in SAP system and security administration, I saw a lot of different authorization setups. The authorizations concept of axl & trax convinced me from the first day we started with the implementation: it is both transparent for business people and technically easy to maintain.

Implementing this global concept for both AMI Semiconductor's SAP R/3 and SAP BW systems signicantly increased the company's security and ability to maintain and adapt the authorizations in an efficient way."

Ann De Waele
SAP Basis Administrator
ON Semiconductor

Delhaize

"As being faced with numerous SAP R/3 authorization conflicts, at Delhaize Corporate Financial  Systems, we decided to contact [...] the largest authorizations company in Belgium, providing services in audit, control and security. The challenges were threefold; first of all an incomplete authorizations set-up needed to be replaced with a future-proof concept supporting Delhaize Group's anticipated growth path."

Willem Baelde
SAP Centre of Excellence Manager 
Delhaize Group

Read more ...