In connection with a consolidation of several ERP systems, Alpiq had to perform a SAP role redesign while ensuring compliance with their internal security concept.
Using the Xiting Authorization Management Suite (XAMS), Swiss energy supplier Alpiq was in a position to redesign its SAP roles in only three months. The redesign was implemented across the Finance, Controlling, Materials Management, Sales and Distribution, Treasury, and Human Capital Management modules. To ensure compliance during the project, Alpiq used Xiting’s Security Architect.
- Name: Alpiq Management AG
- Location: Olten in Switzerland
- Industry: Energy
- Sales: CHF 9.3 bn.
- Employees: approx. 7,800
- Website: www.alpiq.ch
- Xiting solutions used: Xiting Authorizations Management Suite
- Redesign of authorizations for the modules: FI, CO, MM, SD, TR and HCM
- Restructuring of SAP authorizations (due to the consolidation of multiple ERP systems)
- Project duration: 3 months
- Increased efficiency
- Reduction of expenditure for the IT audit in 2015
- Creation of an authorization concept that can be maintained sustainably
- Tight project schedule of 3 months
- Consolidation of multiple ERP systems into one new ERP system
- Compliance with their authorization concept
- XAMS helped to automate many tasks of the redesign
- Redesign did not interrupt ongoing business processes
- Compliance with the extremely tight project schedule
- Timely creation of high-quality roles
- Automated tests ensured compliance with the security concept
- Audit-compliant SAP authorizations
- Increased efficiency
- Merger of several ERP systems into one centralized SAP system
- Significant cost- and time-savings
- Low-risk go-live
- Best practice-based authorization concept
- Minimal expenditure for maintaining the authorization concept
Role Redesign in Three Months
Merging multiple SAP systems is a complicated process which requires a precise knowledge of the requirements of the company and for operational changes to be taken into account as these are incorporated. Many companies shy away from this type of consolidation since doing so will mean that redesigning the authorization concept is unavoidable, productivity may be compromised, and because they fear that there will be a substantial burden on the departments.
“In today’s SAP environment, the restructuring and safeguarding of SAP authorizations represents a complex and time-intensive undertaking. It is not possible to stick to a tight schedule with a manual approach, while ensuring high-quality authorizations.” Patrick Bockel, CEO Xiting.
The Alpiq Group, an energy supplier in Switzerland, decided to carry out a redesign of the authorizations within the scope of a merger of multiple ERP systems with the help of the XAMS.
“The Xiting Authorizations Management Suite combined with the highly experienced and dedicated consultants at Xiting have enabled us to comply with a barely feasible project schedule. All of the necessary roles were created and went live on time. It would be nice if we were able to find such professional support for all our projects from all consultancy companies. SAP role building is no longer conceivable for us without XAMS.” Uwe Schubkegel, Head ERP Applications at Alpiq Management AG
It is often tough to monitor security in large SAP landscapes. Xiting has developed a new tool, Security Architect, to help address that issue. It provides best practice templates for an authorization concept, which can be easily adapted to customer requirements.
“The authorization concept created and implemented within the framework of the system consolidation must be established in 2015 with minimal expenditure. In particular, we hope to significantly reduce the expenditure for the IT audit by using the XAMS. The creation and ongoing monitoring of compliance with the SAP authorization concept will be realized automatically with the help of Xiting Security Architect. In addition, we can see great opportunities for supporting forthcoming SAP projects in 2015 in a timely and efficient manner, and with favorable project costs.” Uwe Schubkegel, Alpiq Management AG.