Background

key
insights

Key Insights

Throughout our work, we've uncovered the most effective procedures, techniques, and methodologies for effectively delivering SAP Security and GRC solutions. We proactively share this knowledge through our Key Insights programme - a series of roundtables, webinars and thought leadership activities aimed at promoting discussion with peers and experts around best practice and to generate an informative forum for knowledge sharing.

Insight Events

Webinar: Managing External Threats to SAP

Webinar: Managing External Threats to SAP

Online

Many organisations are not fully aware of the extent of the risks or gaps within their SAP security systems. Internal risks are usually well understood, but as businesses become more connected with each other and consumers, they need to secure themselves from increasing external threats. How secure is your system to external threats? How we can help In this session we are going to look at how both SAP and external threats have evolved over the years and focus on the key areas that we need to secure in order to protect the SAP systems running our essential business processes. What to do next Visit the webinar page for further information, or to register your interest. We will be in touch with further joining instructions soon. We look forward to hearing from you.

Read more
Roundtable - A ‘Hands-On’ Workshop with SAP GRC Process Cont

Roundtable - A ‘Hands-On’ Workshop with SAP GRC Process Cont

Turnkey Head Office, London

This Turnkey Consulting Roundtable event focusses on process controls and will cover the following three main areas: How to leverage investment in broader GRC The generic benefits of process controls Demonstrating operational efficiency To find out more, please contact us.

Read more
Putting the Governance into your SAP GRC Initiative

Putting the Governance into your SAP GRC Initiative

TBC

This roundtable explores the right levels of business ownership, decision making authority and organisational structure around security, risk and compliance, providing insights into how to structure governance successfully. It will look at how to get the right levels of top-down involvement so that GRC will function on an on-going basis. In addition, we will examine how you can measure your current GRC position, highlighting how to reduce the number of control gaps within your organisation.

Read more
Richard Hunt

SAP GRC 2014, Orlando

4 Apr 2014

Posted by Richard Hunt

Last week I attended the US based SAP GRC conference for the eighth year in a row and this year it was back to where it all started for us, Orlando Florida.

Make a Comment
Simon Persin

The Paradox of password rules

14 Feb 2014

Posted by Simon Persin

Many organisations can expect to see some sort of findings on their audit reports pertaining to their system password rules and settings. Examples of these include the number of lowercase, uppercase, numerical or special characters required in passwords in combination with not being able to reuse passwords which have already been used. It is a widely held belief that the more restrictions and conditions that are placed upon passwords, the more secure your systems is. I believe that this is actually a paradox. In my experience, more complicated password conditions actually lead to a proliferation of simplistic passwords which can be more easily guessed or cracked. This actually reduces the security of your system rather than enhance it. It is also much more likely that users will write down their passwords in an unencrypted document on their PCs or potentially on a notepad or post it note nearby as a way of remembering the complicated passwords.

Make a Comment
Alex Ayers

Common Characteristics of High Performing Teams

19 Dec 2013

Posted by Alex Ayers

10 characteristics of high performing security and GRC teams.

Make a Comment

"The Key Insight sessions are an ideal way of sense checking your current ways of working."

Chris Haigh, Global SAP Security Specialist, Kimberly Clark Corporation & Chairman of SAP GRC User Group

"I found the session to be very useful, informative and well facilitated."

Olu Adeosun, Compliance Manager Enterprise Systems, BP plc

"The session I attended was indeed very interesting with a lively and stimulating round table discussion."

SAP Project Manager - Global Petrochemical company

"It was a well facilitated event, would happily recommend future events to others and would hope to attend again."

Mike Bonsor, Head of Project Management, SThree Plc

"I took away some good knowledge and would clear my diary to attend another one of the sessions."

Olu Adeosun, Compliance Manager Enterprise Systems, BP plc

"Key Insights added significantly to my knowledge of the topic discussed."

SAP Project Manager - Global Petrochemical company

"The points debated were most useful in applying to our own circumstances"

Mike Bonsor, Head of Project Management, SThree Plc

"Key Insights allows you to find out from others what does and does not work well."

Chris Haigh, Global SAP Security Specialist, Kimberly Clark Corporation & Chairman of SAP GRC User Group

"The points debated gave the opportunity to avoid pitfalls that others had made."

Mike Bonsor, Head of Project Management, SThree Plc

"The session I attended was indeed very interesting with a lively and stimulating round table discussion."

SAP Project Manager - Global Petrochemical company