CIO, Large Lubricants and Chemicals Corporation ...

“Using Xpandion’s ProfileTailor Dynamics, we were able to very quickly narrow user authorizations – a task that would have taken us weeks if we had done it manually. With ProfileTailor, it took only minutes to check the actual usage of every user. In addition, we received automated reports that supplied us with all the information required for our auditing projects. This saved us a tremendous amount of time and money, and our employees were freed to accomplish more high-level tasks during the time saved. We are very satisfied with the process and the results, and would highly recommend Xpandion to any company needing to narrow their SAP authorizations and automate their auditing processes.”

SAP Division Manager, Major Medical Center ...

“ProfileTailor significantly increased the hospital’s security level by eliminating SAP_ALL authorizations, narrowing authorizations according to actual usage, and removing inactive users. We now have real-time insight into the actual SAP-related activity being performed by our employees. The implementation took only 3 weeks, and has reduced the risk of fraud and breach of privacy, months of manual work were avoided, and 18% has been saved on maintenance costs. We are very pleased with the results and highly recommend Xpandion’s solution.”

SAP Security Tools: ProfileTailor™ Dynamics

The Next Generation in SAP Security & Authorization Control


ProfileTailor™ Dynamics:

  • Delivers, for the first time, total visibility of actual, real-time authorization usage.
  • Increases SAP Security & Control.
  • Decreases costs of SAP Licenses and SoD, SOX, and Authorizations Projects.


SAP Security: A New Approach

As an advanced behavior monitoring & alerting system, ProfileTailor™ Dynamics delivers unprecedented visibility of actual, real-time SAP authorization usage.

The system:

  • Monitors the access & operations of SAP systems
  • Generates detailed dynamic usage profile analyses for SAP users
  • Sends alerts about unusual or unacceptable activity, including risk severity level


WHY Enterprises NEED ProfileTailor™ Dynamics

The SAP Authorization mechanism is very complex; organizations lack the ability to determine which authorizations are used, unused, underused, or duplicated.

Due to lack of SAP knowledge, security officers are unable to monitor and control authorizations.

Organizations want to control SoD compliance automatically.

Employees collect new authorizations as they change roles in the organization; they rarely give up old authorizations, even if not needed in their new positions.

SAP_ALL and other privileged user authorizations are often not removed, even when employees’ jobs no longer require this extremely sensitive status.

The situation rapidly gets out of control and continues to worsen over time.

Typical SAP users utilize only 7% of their authorizations, opening the door to security breaches and other risks.

It is critical for enterprises to prevent fraud and leakage of sensitive information.

Everyone is aware of the problem, but there has been no easy, fast, reliable way to fix it … until now.

ProfileTailor™ Dynamics shines a light into the abyss of authorizations and makes true SAP security possible for the first time - enabling CISOs to do their jobs – quickly, thoroughly, and easily.

SoD Made Simple

A Segregation of Duties module enables the identification of violations of SoD combinations on both the static level of granting authorizations for users - and on the dynamic level, as a compensating control. A "What If" mechanism tests for potential violations.

 

Automatic SAP Auditing

ProfileTailor Dynamics delivers continuous auditing based on users’ actual, real-time behavior.

 

  • Requires no special IT or SAP knowledge
  • Automates labor-intensive tasks that were previously performed manually
  • Provides continuous monitoring
  • Improves quality of audits, with real-time alerts about exceptions
  • Enables frequent, more comprehensive testing
  • Reduces risk of fraud
  • Reduces costs of audits


SAP Licensing Optimization

ProfileTailor™ Dynamics can help you save on new SAP licenses and enables re-use of unused SAP licenses when expanding.

  • Decreases number of SAP Licenses; Examines SAP users according to actual daily usage, enabling elimination or lowering of licenses for users with no - or low – activity.
  • Reduces Double License Counts; Identifies and alerts to simultaneous usage by same user from multiple computers, preventing double payments for the same SAP usernames.
  • Pinpoints unused SAP licenses and licenses with low usage.

 

Dramatically Cuts SAP Costs

ProfileTailor™ Dynamics identifies unused objects, dramatically simplifying maintenance and upgrades. Automation of in-house and outsourced auditing tasks through ProfileTailor™ Dynamics saves up to 30% on external auditor hours - including SAP audits, SoD/SOX projects, and pre-defined risk reports - and over 15% on total maintenance fees.

 

Easy to Install, Easy to Use

The intuitive system requires no special knowledge of SAP. The browser-based system is exceptionally easy to install and operate, is completely risk-free, external to SAP server and client, and requires no changes in the SAP system.

  • Real-time authorization usage transparency
  • Complete authorization control
  • Continuous monitoring and alerts about unusual or unacceptable activity and sensitive transaction execution, including risk severity leve
  • Continuous monitoring and alerts regarding Segregation of Duties (SoD) policy violations
  • Automatic SAP audit trail
  • Elimination of redundant authorizations
  • Major savings on SAP licensing
  • Reduced SoD/SOX & authorization project costs
  • Intuitive, browser-based interfaces for SAP novices


Call today to arrange a free check-up of your organization’s security status!

 

ProfileTailor™ Dynamics Xpands SAP Security and Control --- and Cuts SAP Costs!


Add this page to your favorite Social Bookmarking websites
| More...