cs itools06 csia_reporting_features_v10
DESCRIPTION
Observe. Think. Act. Solve Access Governance challenges for SAP identities in the areas of automated role building, vulnerabilities in SAP systems, streamline roles across SAP systems, auditing rules in eGRC systems, etc. Automated Role Building for SAP environments: Use your SAP systems to identify the access governance requirements and sync them between the SAP systems employed.TRANSCRIPT
© C
SI to
ols
. A
ll R
ights
Rese
rved.
2
Observe. Think. Act.
CSI tools developed dynamic analytics tools that deliver
intelligence from and to decisions taken in identity and
access governance for SAP® environments.
CSI tools’ cockpit and engine
provide insight into your real vulnerabilities,
streamline SAP® roles and then
deliver practical solutions to improve your risk/security
posture, like automated role building and reverse
engineering.
© C
SI to
ols
. A
ll R
ights
Rese
rved.
3
Globally Referenced by hundreds of customers
CSI tools’ references are essentially “Fortune 1000” accounts and
medium accounts in various sectors like Aerospace & Defense,
Automotive, Bank & Insurance, Chemical, Consultancy and Audit,
Energy, Oil & Utilities, ICT and Telecom, Manufacturing Industry,
Pharmaceutical and Health, Public Organizations, Retail, Transport, etc.
© C
SI to
ols
. A
ll R
ights
Rese
rved.
4
Maturity Level Impacts Optimal Starting Point
CB: Codification Builderto document Business Requirements
AO: Authorization Organizerto make, derive and assign (job)roles
SIMulate: to assess access management decisions on users and roles
QA: Quality Assurance / Audit
AR: Access Rights Reporting
SoD: Segregation of Duties
CO: Controls Organizerto manage risks, controls, …
CB
AO
SIM
QA
AR
SoD
CO
© C
SI to
ols
. A
ll R
ights
Rese
rved.
5
Main Benefits of CSI Accelerator®
Features:
Integrated solution to manage or control you SAP users, SAP roles, SoD conflicts, Risks and control measures
The only tool that keeps track of the documentation during building, changing, monitoring and curing
Strong reporting console and dashboards
total flexibility, since every grid of CSI Accelerator can be directly exported to external sources.
Purpose:
Rationalize your business requirements, documentation, templates, role building, role accuracy, provisioning, consistency of access rights over systems, context information for Security Intelligence, SoD, used functionality versus assigned access rights, risks, compensating controls, control measures, …
© C
SI to
ols
. A
ll R
ights
Rese
rved.
6
Analysis Cockpit with Drill Downto monitor your own KPI, KPR, projects, objectives, …
© C
SI to
ols
. A
ll R
ights
Rese
rved.
7
Master – Derived AnalysisDetect and Manage Role Deviation
Deviations from template roles need to be detected easily
© C
SI to
ols
. A
ll R
ights
Rese
rved.
8
Role Content is Deviating from DocumentationSystems can have millions of authorization lines
© C
SI to
ols
. A
ll R
ights
Rese
rved.
9
How Much of a Role is Being UsedIntelligence reports to rationalize the role content and use
© C
SI to
ols
. A
ll R
ights
Rese
rved.
10
Reports Transactions Usagewhat users can do versus what users did
© C
SI to
ols
. A
ll R
ights
Rese
rved.
11
SoD Reportswith causing information to solve the conflicts
© C
SI to
ols
. A
ll R
ights
Rese
rved.
12
The Holistic ViewOverview of compensating controls by drag & drop
© C
SI to
ols
. A
ll R
ights
Rese
rved.
13
Reporting Console
Select a report. This will explain which details are shown when selecting detail levels.
Short description about the report.
Select which items you want on the report.
This section defines the global parameters of
the report.
This section will further restrict the items selected on the report based on the relations of the main item.
Select the details you want on the report.
© C
SI to
ols
. A
ll R
ights
Rese
rved.
14
Dashboard
For all data dashboards exist or can be created in less then 5 minutes
Dashboard designer to fine-tune
© C
SI to
ols
. A
ll R
ights
Rese
rved.
15
Dashboard Designer
© C
SI to
ols
. A
ll R
ights
Rese
rved.
16
Auditing / Monitoring with CSI Accelerator®
Efficient (ROI)
Can be done remotely avoiding all types of collateral costs such as hotel expenses
Can be done online with instant access to intelligence reports
Effective (Best Practice / Security Improvement)Mergers: IT risks are known within the week
QA check on your SAP monitoring system
Simulation on rule changes
How much does the system deviate
Tuned for business readinessDynamic and pointed on demand on any SAP system
Mergers: process & IT risks are known in the week
Report on Desired state versus Actual state
© C
SI to
ols
. A
ll R
ights
Rese
rved.
18
CSI Accelerator Role Building
Efficient
Build 10.000 roles in one day
Automated – replace manual work
Effective Security Improvements
Roles are streamlined (cross-system)
Grouping of business units is automatically done
Context is known (for Security Intelligence)
Continuous monitoring of wrong values in roles
Business enabler
Simplify your job roles
Fast integration in case of mergers or de-mergers
Copy requirements for new SAP systems (CRM, SRM, …)
Fast access inplementation of SAP in new countries
Fast authorization implementation of new modules in SAP
© C
SI to
ols
. A
ll R
ights
Rese
rved.
19
Codification Documenting the Business Requirements
© CSI - all rights reserved
© C
SI to
ols
. A
ll R
ights
Rese
rved.
20
Automated Translation of Documentation into Roles
© CSI - all rights reserved
CCodification
© C
SI to
ols
. A
ll R
ights
Rese
rved.
21
CSI Accelerator – Check configurationCustomizing of SAP checked automatically
© C
SI to
ols
. A
ll R
ights
Rese
rved.
22
CSI Accelerator – SAP License Manager
Allows to simulate the SAP license impact from the authorizations assigned and authorizations used
