Xpandion provides unique, behavior-based analytical tools that optimize
SAP®-driven enterprise management systems.

Xpandion’s unprecedented approach- focused on the real-time behavior of SAP users - has positioned the company as an emerging leader in SAP-based risk management and behavioral analysis software for large organizations.

WHY SECURITY OFFICERS & RISK MANAGERS NEED PROFILETAILOR™ SUITE:

Furthermore, due to the basic structure of SAP security, which is static, the system often fails to identify unwanted events in a timely fashion, and is therefore unable to prevent damage to the organization. These events are often discovered only during an audit, or following a customer query.

The SAP security solutions currently available were developed specifically to answer compliance requirements such as the implementation and enforcement of SoD (Segregation of Duties) policies and to monitor sensitive transactions. They do not provide a comprehensive solution that can prevent security breaches, and do not overcome the significant security omissions in the system. Other issues include cumbersome audit trail access, lack of control over multiple ghost, dormant or dead accounts, and incomplete logging of activities.

Typically, more than 93% of authorizations are unused and easily exploited! Secondly, since the focus of SAP is not security, many critical security features are simply not part of the system. For example, a lack of definitions for privileged access to information can needlessly endanger organizational security, when inappropriate privileged authorizations –are granted. Security can be further compromised by the accumulation of unnecessary authorizations.  The security departments of organizations using SAP® face a number of challenges. Firstly, since they are security experts, not SAP experts, they must rely on internal SAP specialists to retrieve security-related information from the SAP system.>

TO EFFICIENTLY PROTECT THE ORGANIZATION, SECURITY OFFICERS NEED:

• A friendly interface into SAP that does not require SAP expertise
• A method of automatically collecting and analyzing critical data in real time
• A method of automatically comparing authorizations that have been granted with those actually being used
• A method of reducing the number of authorization roles; creating specific, dedicated roles; narrowing authorizations; and revoking privileged authorizations such as SAP_ALL

Xpandion’s ProfileTailor™ Suite meets this challenge, delivering a totally new approach to information security. Based on real-time user profiling, it simplifies and automates SAP security, identifying unusual behavior BEFORE it damages the organization.

THE PROFILETAILOR™ SUITE PROVIDES:

• Total visibility of actual real-time authorization usage
• Easy-to-use web interface requiring no SAP expertise
• Online behavior monitoring and real-time alerts
• Unique, detailed usage profile for every SAP user