Case Study
ICTS, University of Cape Town
How ICTS at the University of Cape Town gets SAP access risk insights on demand with Soterion's Software as a Service.
The ICTS Story
ICTS (Information and Communication Technology Services) is the IT services division of the University of Cape Town. Like many small to mid-sized SAP customers, it needed regular visibility of its SAP access risk exposure — at a price it could justify.
Visibility Beyond the Annual Audit
Many organisations have no visibility of their SAP access risk exposure because they don’t have an access risk tool. They rely on the annual external audit for visibility — but need it more than once a year.
ICTS wanted to manage SAP authorisations throughout the year, not just during external audits, and avoid audit surprises. It could not, however, justify the cost of an on-premise solution.
Why Software as a Service
Soterion's SaaS offering runs in Soterion's secure data centre and is available through industry-standard web technology — on a desktop computer, laptop or tablet, anywhere in the world, at any time. No hardware is required. Data is uploaded from SAP through a simple process, which keeps the administration of the solution simple too.
Why ICTS Chose Soterion
Risk assessments can be run ad hoc and on demand, giving visibility of access risk exposure at an affordable price.
Gone are the days of gaining insight only once a year through the annual external audit.
Management reporting on access risk is easy, because the information is available whenever it's needed.
An industry best-practice SAP access risk rule set that can be customised, with or without the help of your audit partner.
“We needed to be able to view our SAP access risk exposure on a regular basis, but could not justify an on-premise solution. Soterion's SaaS option allows us to acquire insights as frequently as we need them with minimal initial setup, on a payment basis that is under our control and just makes so much sense.”
Richard van Huyssteen, Director: Systems Division ICTS, University of Cape Town
Key Lessons from ICTS's Implementation
- You don't need an on-premise solution to get regular visibility of SAP access risk.
- Manage SAP authorisations throughout the year, not just at external audit time.
- A rule set tailored to your business makes risk results more relevant.
- A hosted SaaS model reduces IT and hardware costs and simplifies administration.
Because Soterion for SAP is accessed from the cloud, SaaS clients can dramatically reduce IT and hardware costs, using it from any internet-connected computer or tablet at rates that are attractive to even the smallest SAP customer.
Clients benefit from a custom-designed rule set uniquely tailored to their business, with the security of knowing their data is held in a secure hosted environment.
Ready to take control of your SAP access risk?
Talk to a Soterion solutions expert.