1. Citrix: Proactively Addressing Enterprise Wide Access Compliance with SAP® Access Violation Management
Company
Citrix Systems Inc.
Headquarters
Ft. Lauderdale, Florida
Industry
High tech
Products and Services
Hardware and software solutions
Employees
9,500
Web Site
Objectives
Maintain security principals to standardize, automate, and provide the ability to scale as the company enables and adopts new cloud technologies including SAP® solutions, SAP Ariba® solutions, and Concur® solutions
Provision and analyze transaction and user activities across SAP and non-SAP business applications to proactively detect and minimize risks
Automate the workflow related to role provisioning and monitoring with controls to protect the company
Eliminate manual touch points related to provisioning and monitoring, automating where possible
Centralize information and governance, and proactively mitigate segregation-of-duties (SoD) violations
Why SAP
SAP Access Violation Management application by Greenlight, which provides the ability to accurately identify and remediate SoD and critical violations in real time and will support all enhancements in the future
Automation of access assignments for the SAP ERP application and SAP Ariba solutions as well as proactive prevention of access violations
Resolution
Implemented SAP Access Violation Management to address the needs for risk analysis, user access management, and managing the access control process
Ability to prioritize controls based on impact to the business and understand the interrelationships
Benefits
Real access risk analysis to accurately identify and remediate SoD and other violations in real time
Improvement in user access management by automating access assignments across the on-premise SAP ERP application and cloud-based SAP Ariba solutions, while preventing access violations with embedded risk analysis
Ability to conduct periodic certification of authorizations, ensure SoD mitigations are effective, and summarize the financial impacts
8–10 week
Implementation, which could be completed in parallel with other activities and allowed Citrix to standardize, automate, and scale
41%
Time savings for proactive risk management and mitigation of SoD violations
Quantified
Financial exposure and savings to better understand the potential financial impact of actual access violations
Improved
Governance as well as automated provisioning and analysis of access risk
“Citrix leveraged SAP Access Violation Management to simplify security processes, automate and improve workflow, and prioritize controls based on business impact. Implementing this solution has allowed us to provision and analyze transactions and user activities across SAP and non-SAP business applications to detect and prevent risks and meet our service-level objectives.”
Danielle Bass, Global Accounting Systems Director, Citrix Systems Inc.
46417 (16/09) This content is approved by the customer and may not be altered under any circumstances.