Products
Broad access control for consultants and administrators
The smartAccess application allows administrators and consultants to access a excessive range of autorization and permissions in the SAP system under special circumstances (emergency, business request, modification), while controlling the risk to the organisation posed by this excessive access. The built-in control mechanisms allow to smoothly pass any AUDIT of the SAP system, and enable to perform any necessary maintenance work in the system.
Entitlement risks under control Risk-free access Segregation of duties
smartWorkflow provides full flexibility of workflow configuration in the processes of provisioning user access. The built-in segregation of duties risk matrix allows for a predictive “what if” analysis at the stage of submission and approval of authorisation access requests. The system automatically assigns permissions on end systems, and a friendly workflow monitors the process and sends email notifications to process participants.
Risk repository
SoD matrix and sensitive accesses
smartSoD is a template access risk repository for segregation of duties risks and sensitive technical access. The library has been developed during security projects delivered for over 12 years for more than 100 customers from various industry and sectors (telecommunication, FMCG, retail, entertainment, production, chemistry, pharma). It works as project accelerator when user access reorganization is required and first project effect are required to be delivered fast. It contains a list of over 125 segregation of duties risks and 50 instances of sensitive access. The application allows to manage the standard content and to introduce modifications from non-standard transactions.
Reporting of redundant access resulting from SoD risks and critical transactions
The smartReport application allows for efficient and cost-effective identification and subsequent elimination of redundant privileges and Segregation of Duties (SDA) risks in user privileges. An engine that enables the verification of user rights in terms of access to transactions sensitive from the business and IT perspective. Reports that enable work from a business perspective (what the risk is) and a technical perspective (how to modify permissions).
Intelligent review of risks
Periodic verification of entitlement status
The smartReview app provides a smart overview of permissions and accesses in various IT systems. The main focus in on segregation of duties risks that exists in users system access. The application documents a history of decisions made, and monitors the changes of user access in connected end- systems. It supports the review process by informing the decision-maker which instances of access were used often or rarely.
Building roles and user rights with a preventive SoD analysis
The smartArchitect application enables the creation of user roles and authorization while taking the segregation of duties access risks into account. The workflows built into the tool allow to define a role before it is generated into a developer environment and later a production one. The system works preventively and provides the administrator of roles and user rights with an array of tools useful in the process of building them.
New products planned for 2023 – 2025
