Examine how SAP solutions for GRC store information within the system’s databases across SAP Access Control, SAP Process Control, and SAP Risk Management, and how to use that knowledge to improve your reporting and analytics processes. By attending, you will:

• Gain a clear grasp of how data is used within the standard reporting capabilities and how it can be configured to support customer requirements
• Review the available data structures in SAP solutions for GRC  
• Walk through important considerations that users of SAP’s analytic solutions should be aware of
• Understand key reporting requirements for SAP solutions for GRC and how they can be met using your current functionality

Learn how SAP Solution Manager, via the configuration validation functionality, can help you to identify discrepancies that are capable of endangering the systems so that action can be taken to remediate identified vulnerabilities. Attend this session to:

• Examine key security challenges you should be aware of in managing a large and complex SAP landscape
• Find out how to setup the configuration validation functionality of SAP Solution Manager
• Understand how to run and interpret different validation reports
• Explore benefits, from a security perspective, of useful SAP Solution Manager features such as security optimisation self-service, system recommendation, and the SAP EarlyWatch Alert

This session identifies the key data attributes associated with personally identifiable and commercially sensitive information, and walks you through different techniques you can use to monitor, detect, and report on its access. Attend and learn how to:

• Construct an automated monitoring framework that can be used as the basis for your continuous access alert system
• Use sensitive access reporting functionality and process controls to deliver alerts when control events are detected
• Integrate data leakage prevention (DLP) tools into your framework to improve the detection of sensitive data being printed or downloaded

Learn how to achieve continuous compliance by combining the risk analysis capabilities of SAP Access Control with the flexible and rule-driven provisioning of SAP Identity Management. Whether you are just considering, or already have achieved, integration of SAP Identity Management and SAP Access Control in the same landscape, this session will deliver details on how the systems work best together and what challenges and obstacles to look out for in this project. You will learn:

• The differences between the 2 systems and why you may need both in your landscape
• Options for provisioning users and access
• A detailed overview of the technical integrations between the two systems, integration scenarios, and pros and cons of integration
• Different approaches to the approval workflows
• An overview of the business role design in each system    

Though network engineers and system administrators are traditionally tasked with IT security-related responsibilities, the complexity of SAP ecosystems requires the specific skillset of an educated Basis admin or expert to effectively identify and secure gaps that may be unique to the SAP platform. This session offers expert advice on how to:

• Protect your IT infrastructure in the SAP application, database, operating system (O/S), and network layers using “Basis layer hardening”
• Mitigate and remediate malicious intrusions
• Establish Basis Layer security as a mindset, a priority, and a part of the ongoing SAP technical maintenance lifestyle

This is your opportunity to sit down with some of the leading SAP experts and walk away with detailed answers to the questions that matter most to you and your business. We invite you to draw on the real-world experiences and insight of these industry top technologists and tap into their expertise to supplement the knowledge you’ve gained. Bring your questions and join us at this year’s Ask the Experts.