About Me

I'm one of the Directors @ su53 Solutions. su53 provides risk management, compliance and security services to companies that run SAP, reducing costs, automating process conformance, driving business results and enhancing your status as a trusted organisation. I'm passionate about Risk Management and Security. My views are influenced by OCEG thinking. My vision aligns Risk to Strategy, focuses on mapping controls to risks, leverages, CCM and data mining. All this operates within your boundaries. Technology is the enabler. Collaboration and Communication are key to the success of GRC. My path to my current role has been varied, joining a Big 4 as a post-graduate from Queens Belfast and Notre Dame Indiana, before developing in depth SAP® BASIS skills en route to a focused career plan to become a lead thinker in SAP related GRC, audit and security. I've travelled extensively and worked with many organisations(from Australia to the Arctic). The breadth of exposure to client SAP systems and the various attitudes, abilities, process and practices around risk management has given me a sound perspective on best-practice. GRC isn’t my job, it’s my passion.

Thursday, 3 February 2011

GRC10.0 is Ramping Up


GRC 10.0 entered Ramp-Up on 13th December. You can expect new names for the old tools, much better integration and a return to the ABAP platform. Not many tears will be shed for the java component of Access Control but it must be said that 5.3 has proven to be much more stable and resilient than the early days of 5.1.

We’ve been planning for GRC 10.0 for almost a year. In September Pete Fitzsimmons and Sarah Dawson spent the month in Palo Alto working on the testing and validation. It was a great experience for them and a crucial insight into the product direction. They returned to base and shaped our mobilization plans for GRC 10.0. A few months have passed now and we’ve done the delta training for Access, Process and Risk. We are upgrading our internal systems and testing the migration routine to make sure that we are ready for our customer demand. We are working on one ramp-up project and will be working with a household name in the UK to deliver an early success on the 10.0 platform.
The key benefits of the new platform:
  • ·         Back in ABAP with all the standard ABAP functionality (job scheduling, SAP query, transport / change  management)
  • ·         Integrated with other GRC modules with shared master data
  • ·         Organisational level security available to restrict access to data
  • ·         SAP Business workflow is considerably more flexible and aligned with customer skills
  • ·         Audit logs for SPM(aka Firefighter) are much improved and Firefighter users can now be administered centrally
  • ·         Process Control query design is more sophisticated and flexible
  • ·         Collaborative risk assessments in Risk Management
  • ·         Alignment of risk to policies
There will be much more that we can share on 10.0 after GRC 2011 in Las Vegas. (www.grc2011.com). Watch this space. Contact me if you have any specific queries.

No comments:

Post a Comment