Michael H.-Executive Consultant SAP Authorizations, Security & Compliance | Senior Consultant SAP Information Lifecycle Management

SAP Authorization support for RKU-affiliated energy and public transport companies in the areas of Utilities, Mobility and Public

• Managing (evaluating and correcting) the SAP authorizations of the participating companies BOGESTRA, DEW21 Dortmunder Energie- und Wasserversorgung, DSW21 Dortmunder Stadtwerke, ewmr - Energie- und Wasserversorgung Mittleres Ruhrgebiet, HCR Straßenbahn Herne Castrop-Rauxel, nvb Nordhorner Versorgungs-betriebe, Stadtwerke Bochum, Stadtwerke Geldern, Stadtwerke Hattingen, Stadtwerke Herne, Stadtwerke Lünen, Stadtwerke Troisdorf, Stadtwerke Tübingen, Stadtwerke Velbert, Stadtwerke Witten, WerraEnergie

SAP S/4HANA Transformation – Authorization Concept & GRC (SAST)

Greenfield design and implementation of the user and authorization concept for the SAP modules FI, AM, CO, BP, CM, PS, MM, SD (O2C and P2P processes), PaPM, REFX (I2R) and third-party products with transactions & apps (Fiori)

• Evaluating workstations for the defined areas/teams
• Setting up the task role template, including Fiori
• Setting up workstations
• Aligning the content of business roles with process owners
• Supporting integration and user acceptance tests (end-to-end test)
• Go-live support during the stabilization phase

Implementation of SAP authorization concept S/4HANA with SIVIS (SAST)

greenfield, design and implementation of the user and authorization concept for the SAP modules FI, AM, CO, MM, SD, PP, PM, PS, QM, WM, GTS and Fiori

• Evaluation of workstations for the defined areas: SCM-Production, Purchasing, Finance, Controlling, Service, Shipment, Quality Management, SCM-Planning, Sales, Warehouse Management and GTS
• Development of the task role template including Fiori
• Development of the workstations
• Coordination of business role content with process owners
• Transfer of SAP standard task roles, derived roles and workstations to SIVIS (functions, positions, collective positions)
• Support during I-tests and user acceptance tests
• Support during go-live in the stabilization phase

SAP/ERP project management

within the ongoing SAP authorization management operation to reduce SoD conflicts (SAST)

• Project management in the ongoing SAP authorization management project
• IAM with the Sivis Compliance Manager tool as an interface to SAP FI and CO in the Finance department
• Analyze and resolve SoD conflicts
• Manage Finance stakeholders
• International accounting
• Implement coaching and management of role management

Project ROAR 2.0 SAP/ERP

Optimization of workstations by reducing SoD conflicts using the new rulebook from the Heineken Group. Design and implementation of HCM roles in the task role concept

• Analysis of workstations and optimization, in some cases through restrictions at the OE or BO level
• Evaluation of workstations for the defined HCM departments
• Development of the task role template
• Coordination of business role content with process owners
• Support during I-tests and user acceptance tests
• Support during go-live in the stabilization phase

Design of SAP Security Concept ERP/HANA

Creating an SAP Security framework concept for S/4-HANA and ERP 6.0 systems.

• Creating an SAP Security framework concept for HANA (SAP FI, CO, MM, SD and PP) and ERP 6.0 (SAP IS-H, SAP HCM and the in-house development „Automatisierte Leistungen Vertragspartner Abrechnung“ ALVA mit SAP)

SAP Authorization Concept Implementation, SAP/ERP

Design and implementation of the user and authorization concept, taking into account the requirements of the EU GDPR and compliance (SAP GRC by Heineken) at a beverage manufacturer for the FI, AM, CO, MM, SD, PP, PM, PS and QM modules

• Evaluation of workstations for the defined business areas
• Setting up the task role template
• Coordinating business role content with process owners
• Supporting integration tests and user acceptance tests
• Supporting go-live during the stabilization phase

SAP ILM Implementation

Designed and implemented the ILM concept for personal data (EU GDPR)

• Identified ILM objects for the FI, CO, MM, SD, APO, RE-FX modules
• Performed basic and module-specific customizing
• Defined the blocking and deletion matrix based on the records of processing activities
• Implemented residence and retention periods
• Tested blocking and deletion processes
• Put blocking and deletion processes into production
• Supported go-live

SAP ILM Implementation

Designed and implemented the ILM concept for personal data (EU GDPR)

• Identified ILM objects
• Performed basic and module-specific customizing
• Defined the blocking and deletion matrix based on the records of processing activities
• Implemented residence and retention periods
• Tested blocking and deletion processes
• Put blocking and deletion processes into production
• Supported go-live

SAP Authorization Concept Implementation

Designed and implemented the user and authorization concept, taking into account EU GDPR requirements at a German automotive supplier for the FI, AM, CO, MM, SD, PP, PM, PS, QM, PPM, ECTR and GTS modules on an HANA database, and provided functional support for the SAP GRC 10.1 implementation

• Evaluated workstations for the defined E2E areas
• Set up task role templates
• Coordinated business role content with process owners
• Supported integration tests and user acceptance tests
• Supported go-live during the stabilization phase

Conducting SAP Security Audits at two companies (mid-sized industrial company, public-sector IT service provider)

• Tool-supported SAP Security Audit, followed by a review of the most critical and critical findings in the areas of configuration, interfaces, critical authorizations, critical authorization combinations (SoD) and source code analysis

Team Lead, Design, Implementation & GoLive of Solution Manager, evaluation of SAP penetration testing tool

• Designing and implementing authorization concepts
• Workstations and authorization roles
• Planning and conducting the test phase
• GoLive support for the Business Areas: TK Elevator, TK Industrial Solutions and TK Component Technologies
• Support for SolMan TK AG
• Support for the BAs TKAG, TKIS, TKET and TKCT using SolMan Incident & ChaRM tickets
• Evaluation of SAP penetration testing tools based on TK BSS internal requirements

Project “Analysis and implementation of mitigating controls (SOX) after go-live of BP SE (DE, AT and LU)

Analysis of SoD conflicts using SAP GRC 10.1 and implementation of mitigating controls in the business

• Analysis of SoD lists for the country subsidiaries and individual business units
• Preparation of options for preventing conflicts
• Definition of mitigating Controls (MC’s) for each risk
• Assignment of MC’s to the affected SAP users for each risk

Project “Introduction of a new SAP authorization concept for the financial and business system (FIWI) of WGKK

Conversion of the financial/business system roles and authorizations built up over the years for Austrian social insurance providers to a workplace-based authorization concept

• Analysis of SAP authorizations in FI, CO, IM, AA, MM
• Analysis of existing SAP roles and authorizations in the individual FIWI areas (financial and business system, including IS-H, in-house applications and cross-functional topics) and identification of potential improvements
• Definition of individual workplace roles (tasks and functions matrix) with the responsible key users and department heads for each area (e.g.: Finance Department)
• Configuration of workplace roles in the value matrix
• Introduction of Lean Role Management (principle of minimum authorizations)
• Test management and coordination of functional and integration tests
• Ongoing adjustment and optimization of roles during testing
• Planning, execution and support of go-live
• Consulting and support services for project management
• Planning, execution and facilitation of workshops and coordination meetings
• Participation in PL meetings and PLA’s

SAP authorizations IS-H, SAP Core, Records-Mgmt. (RM) and RE-FX

• Management, support and training for SAP authorizations

Reorganization of the Austrian social insurance organizations’ “SAP authorization concept” and creation of an SAP authorization concept across social insurance providers

• Structuring and development of the cross-organization SAP authorization concept for all Austrian social insurance providers
• Documentation of the cross-organization SAP authorization concept for all Austrian social insurance providers

Conversion of SAP authorizations from profiles to roles

Implementation of a new authorization concept for FI, CO, MM and BC

• Analysis, organization and conversion of existing profiles into a role-based authorization concept

Project “Setup (organization and implementation) of a role-based SAP authorization concept” for the FI, CO, MM, SD, HR and CATS modules and SAP custom applications in the finance and logistics areas; review with CheckAud for SAP

• Organizing and setting up the MM & SD tasks/functions matrix
• Designing SAP authorizations (document): setting up roles, naming conventions, role contents, attributes, derivations, etc., with support from the individual SAP functional/module consultants
• Implementing the designed roles for MM, SD and QM, including FI and CO (creating new roles / redesigning existing roles)
• Organizational units (OUs)
• Redefining OUs from authorization objects (AOs)
• Redefining AOs
• Analyzing roles with the CheckAud for SAP audit tool

Project “SAP authorization optimization” Identifying weaknesses and resolving them.

• Analyzing authorizations in SAP Core and ISU
• Identifying opportunities to improve critical authorizations and prevent conflicts (SoD)

Project “Setup of role-based authorizations”

Enterprise, modules: FI, CO, MM, SD, QM, PP, PM, Europe-wide implementation of the baseline FT, IT and UA tests, ZBV, SSO, GRC, GoLive planned as part of the overall project

• Organizing and setting up the tasks/functions matrix and the organizations/values matrix with the customer’s IT staff and with support from the individual SAP functional/module consultants
• Roles were set up through the process defined in SolMan (templates, derivations, single roles, composite roles) together with the customer’s authorization coordinators
• Administration via ZBV (IdM) through the HCM organizational structure

Project “SAP Rollout” - SAP R/3 Enterprise. Rollout for modules MM + SD, design, customizing, workshops, go-live support.

Project “SAP Release Upgrade from SAP R/3 Enterprise to mySAP ERP2005 + unicode”

Project management for an SAP consulting firm in collaboration with the customer and T-Systems (SAP FI, CO, SD, MM, PP, custom developments, BW, IXOS, interfaces to external systems)

Review & development of role-based authorization concept - SAP R/3 Enterprise, organization, design, implementation, testing and go-live in coordination with management and KPMG for the FI, CO, MM, PP, SD modules, custom developments and interfaces

Integration PM-SAP / HV-SAP

Optimization of VPA-relevant processes, company code optimization for the BMF, mapping of flex clause-relevant postings, authorizations

“Connecting POS cash registers to SAP R/3 4.6c” – Subproject lead, planning (functional and technical), design, customizing, testing, training and coaching of key users. Introduction of SAP authorization management, coaching of SAP Basis, workshops

“Student free travel administration”

Subproject lead for the development and introduction of student free travel administration in R/3 4.6c, SAP-PT. Organization, planning (functional and technical), design, customizing, coordination with developers, testing, documentation, training and coaching of key users. Support with SAP authorization management and coaching

Project Management “SAP Authority”

Organization, design, consulting and implementation of the SAP R/3 4.6c authorization system for FI, CO, MM, SD, PS for mail-order retail, process design and implementation of reporting

Project “eCIS”: SAP R/3 4.6c

Connection of the web application to R/3 using RFCs and function modules via BROKAT-Twister (middleware). Design, coordination, implementation (programming) of RFCs and BAPIs, testing and acceptance. Design,

implementation, testing and acceptance of web user authentication on R/3 via ACE-Server