Access Risk Controls for SAP is a dedicated module that maps IDEAS' segregation of duties model to SAP, and connects to SAP systems to evaluate and and enforce SoD policies. With Compliance Controls for SAP, businesses can manage and enforce SoD policies on both SAP and non-SAP applications with a single administration.

Controls for SAP-Specific Features

The native SAP authorization model is complex, with its own particularities and pitfalls. SAP's native transaction objects can combine to allow access in unforeseen ways, and SAP wildcards in SAP authorization objects are a powerful but often insecure feature.

IDEAS Access Risk Controls for SAP includes specific controls the check the use of these SAP features and scans for unintended access and security consequences. Compliance managers can define policies for secure SAP role design and these are enforced by Access Risk Controls for SAP.

Comprehensive Access Governance for SAP

Compliance Controls for SAP leverages IDEAS' native activity-based SoD model, SoD domains, what-if analysis, and integrated access risk remediation, bringing all the advantages of IDEAS access governance to SAP applications.

Advantages:

• Manage SoD and access governance for all SAP and non-SAP systems from a single point
• Define and enforce policies for secure SAP role design
• Enforce SAP SoD policies in user authorization workflow
• Automatically apply risk remediation measures to SAP SoD conflicts

Related Products:

• Access Risk Controls