Access Risk Manager
Soterion’s Access Risk Manager provides the ability to identify SAP access risk exposure and show clean-up opportunities via a user-friendly web application. The solution also includes:
- Privacy risk dashboard: provides insight into which employees have access to sensitive data
- 'What-if' Allocation Simulator: proactively identifies the risk impacts of any changes before applying them to your SAP system
- Clean-up wizards: provide clear, focused, step-by-step suggestions on how to eliminate access risks
- Business-process flows: support business decision-making by visualizing risks within business processes.
Download brochure
Basis Review Manager
Soterion's Basis Review Manager will inspect your SAP Basis configuration against a set of rules that are based on your industry best practices. Be prepared for audits, and ensure complete compliance with:
- high system-level controls to secure your SAP system
- a set-up in line with your specific security requirements
- a set of specific rules for roles, users and parameters
- results of your SAP system checks highlighted as pass or fail
Download brochure
SAP License Manager
This module identifies under-utilized, unused and incorrectly classified SAP user accounts by monitoring user activity in SAP. Soterion's SAP License Manager allows you to:
- tailor your SAP license agreement to your organization’s specific requirements
- ensure optimal contract management and complete compliance
- reduce unplanned and excess costs.
Download brochure
Elevated Rights Manager
From time to time, clients need temporary or emergency access for a limited period – often called firefighter access. This module allows you to do this efficiently, and provides a complete audit trail. The module:
- grants sensitive access in a safe and structured environment, via an automated workflow-driven process
- provides evidence of changes made and the review of any activities that were performed during the Elevated Rights Access check-out period.
Download brochure
Periodic Review Manager
This solution allows your business users to periodically review your SAP user access risk in your SAP systems easily and efficiently. This process will significantly improve the visibility of your GRC environment, and may be an audit and statutory requirement for your organization.
With Periodic Review Manager you can:
- review your SAP user access allocations to ensure that all assignments are still relevant
- recertify user access by identifying and removing redundant and superfluous access
- perform user role approvals and rejections via an automated email from administrators (it prompts all relevant approvers to participate in the review process by simply logging into their Review Inbox from any web-enabled device)
- review and update your risk rule-set to ensure continued relevancy in an evolving business environment
- optimize the efficiency of your mitigating controls by identifying any gaps in control effectiveness.
Download brochure
Central Identity Manager
Central Identity Manager enables you to decentralize the provisioning of SAP user access to the business, so you can:
- address multiple business objectives with the Business Role concept
- increase the efficiency of the provisioning process
- reduce the effort required to carry out a User Access Review
- convert the Business Role into business-friendly GRC language to make informed decisions
- reduce the support effort and related costs required to manage user access in non-production SAP systems.
Download brochure
Data Privacy Manager
Data Privacy Manager helps you comply with the ‘privacy by design’ concept in data privacy legislation such as GDPR. This module:
- monitors which users in SAP have access to sensitive personal information
- analyzes all SAP tables, and highlights those that contain fields with personal or sensitive data
- categorizes the data, by Data Domain and Data Subject
- facilitates the creation of a data privacy rule-set, based on the fields defined as ‘sensitive’ by your organization.
Download brochure
Continuous Controls Manager
Soterion’s Continuous Controls Manager enables organisations to identify risks where an SAP user has not only performed the conflicting functions but has done so for the same document. This ability to continuously monitor materialised risk violations enables the organisation to move from manual controls to an automated and alert-based approach.
By extensively scrutinising the SAP transactional data, continuous control monitoring enables organisations to monitor access risks that materialise, ensuring a more effective access risk management capability.
Download brochure
Password Self-Service
Soterion provides users with the ability to reset their SAP passwords which reduces the burden on the authorisation support team and associated costs.
The self-service functionality reduces business down-time by empowering users to reset passwords instantly.
Download brochure
