Security (ACS) SIG

Our Audit, Control and Security (ACS) SIG is a well-supported group attended by a cross-section of professionals working with SAP and representing the following business areas: IT Security; (including SAP Basis experts) IT & Financial Audit; and Risk Management.

We understand how important networking at our face to face events is to you and since we can't get together in person right now, the session will start 30 minutes before the SIG commences so you can grab a coffee and have a virtual catch up with the SIG chairs and other attendees.

Michael Heckner from SAP will speak about the Risks in Your Business Processes.

This interactive session will host a business-level discussion around key business risks in typical business processes. The presentation will address some of the major risks an organisation needs to address in common processes such as Procure-to-Pay, Oder-to-Cash, Fixed Assets, Treasury, Financial Close Process, HR, IT, etc. The session will provide both, a strategic level view on top risks in 2021, as well as a detailed view on risks within each of above business processes.

David Lloyd from Grey Monarch will run a session on SAP Security Automation - The top five quick-win automations that will save you time, make your users happy, and delight your auditors.

At Grey Monarch they implement a lot of SAP security and employee lifecycle automations, however there are a particular five that always go to the top of the list because they are so quick to implement, auditors love them, and they provide such immediate and exceptional value:

• Automated Authorisation Review (sometimes known as Access Recertification)
• Emergency Access (sometimes known as FireFighter)
• Self-service Password Reset
• Automated Leaver (Off boarding) process
• Automated Process Controls

Brian Froom & Rhian Parry will share their insights after recently sitting down with the SAP experts to discuss the following topics:

• SAP Cybersecurity Portfolio
• SAP Identity and Access Management Solutions
• SAP Access Control
• SAP Cloud Identity Access Governance
• SAP GRC Portfolio

Our UKISUG Audit Control & Security SIG Chairs:

Brian Froom has 21+ years’ experience as an IT Auditor across different sectors. He is currently involved in the security and monitoring of Tata Steel’s SAP installations across UK and Europe.

Rhian Parry has been leading Welsh Waters IT External Audits since 2012 along with the SAP Access and Authorisations Annual user reviews with SAP licence Management now in her remit as Dwr Cymru Welsh Water’s SAP Assurance Lead within the SAP Centre of Excellence.

Please note this will be held on Zoom and the dial in details will be sent out 24 hours in advance.