Business-Centric GRC & SAP (FUE) Licensing Solutions
Soterion is an international leading provider of SAP Governance, Risk and Compliance (GRC) and SAP (FUE) licensing solutions for companies running SAP. Soterion’s user-friendly GRC solutions provide SAP customers with in-depth access risk reporting to allow organisations to effectively manage their access risk exposure.
Soterion is passionate about simplifying the GRC processes, with a focus on translating this complexity into a business-friendly language to enhance better decision making and business accountability.
What are your GRC business objectives?
Secure SAP solution
Access risk software together
with expert consulting tailored
to your organisation.
Improve efficiencies
Reduce effort for SAP user support and GRC compliance tasks with process improvements and automations.
Control Licensing Costs
Determine the optimal number of SAP (FUE) user licenses required based on actual system usage.
Accountability of access risk
Convert technical GRC language into visual concepts that business users understand and own.
How can Soterion help you?
Soterion assists organisations with their SAP security, compliance and SAP (FUE) licensing requirements. By comprehensively grasping their individual needs, we create customised GRC roadmaps, enabling organisations to maximise the returns on their GRC investments.
Guided, step-by-step GRC maturity process
Use our proprietary GRC Maturity Model to benchmark your current GRC maturity level and Enhance your GRC capability.
Used by over 150 clients around the world
Soterion has helped organisations for over a decade to extract maximum value from their GRC investments.
SAP (FUE) license optimisation
Identify the optimal number of FUEs based on actual system usage to eliminate unnecessary license costs and prevent mid-subscription true-ups.
Powerful, size-sensible features
All the GRC features your business actually needs without complex, unnecessary functionality.
Trusted by the big 4 global audit firms
Audit firms place trust in Soterion’s accurate and easy to use reporting, backed by excellent support.
Total cost of
ownership
Lower cost of ownership with rapid implementation and cloud offerings. Flexible subscription options available.
Soterion’s GRC and SAP (FUE) licensing solutions
- Access Risk
- Basis Review
- Central Identity
- Continuous Controls
- Data Privacy
- Elevated Rights
- Password Self-Service
- Periodic Review
- SAP License
Access Risk Manager
The Access Risk Manager provides customers with the ability to identify their SAP access risk exposure using a user-friendly web application. Additional functionality includes risk remediation recommendations and the “What-if” Allocation Simulator. The Simulator will allow you to pre-empt risk bearing access prior to applying the change request in SAP, thus ensuring a pro-active approach to SAP access risk management.
Basis Review Manager
SAP Basis Configurations provide system-level controls to secure an SAP system. The Basis Review Manager compares your SAP Basis Configuration to an industry best-practice set of rules. Since these configurations usually form part of an annual external audit, our Basis Review Manager allows you to be prepared, and will establish complete compliance to avoid adverse audit findings.
Central Identity Manager
The Central Identity Manager introduces the Business Role concept to improve efficiencies in the SAP user provisioning process. Standardisation of job functions across the organisation reduces complexity and the effort required to manage and review SAP user access.
Continuous Controls Manager
Soterion’s Continuous Controls Manager enables organisations to identify risks where an SAP user has not only performed the conflicting functions but has done so for the same document. This ability to continuously monitor materialised risk violations enables the organisation to move from manual controls to an automated and alert-based approach.
By extensively scrutinising the SAP transactional data, continuous control monitoring enables organisations to monitor access risks that materialise, ensuring a more effective access risk management capability.
Data Privacy Manager
The Data Privacy Manager analyses all tables in SAP and highlights those that contain fields with personal or sensitive information, categorising the data by Data Domain and Subject.
Elevated Rights Manager
The Elevated Rights Manager grants sensitive fire-fighting access in an automated workflow-driven process, and enables your management team to perform a structured review of any activities that were performed during the Elevated Rights Access period.
Password Self-Service Manager
Soterion provides users with the ability to reset their SAP passwords which reduces the burden on the authorisation support team and associated costs.
The self-service functionality reduces business down-time by empowering users to reset passwords instantly.
Periodic Review Manager
Periodically reviewing your SAP user access, analysing the associated risks and evaluating the necessary controls will align your GRC capacity with your individual business targets. This process will significantly enhance the insight into your GRC environment, as well as being an audit and statutory requirement in many business environments.
SAP License Manager
With SAP pushing customers toward S/4 and SAP Cloud ERP Private (previously called RISE with SAP), many organisations are unsure of what that transition will truly cost them.
Soterion’s SAP License Manager can assist organisations gain clarity on their actual user license requirements – not just what their SAP role design indicates, but what they really need based on actual system usage.
Trusted by customers worldwide
What Our Clients Say
Visit our blog
SAP Security & GRC Podcast - Technical Series (E02): Authorisation Default Values
Security & GRC Podcast – Technical Series (E01): Basic SAP Authorisation Concepts – SAP Transactions & Fiori Applications, Authorisation Objects, Fields and Values
Getting Your SAP Licensing (FUEs) Right: Optimise Before Moving to RISE and Stay Compliant After
Stay informed
Receive news of events, webinars and SAP security and GRC related insights delivered to your inbox.