MANAGING OUTSOURCED IT PROVIDERS FOR SAP GRC

We recognise that many organisations choose to outsource their IT, including SAP security-related activities.  This is often delivered as a managed service back to the organisation, with responsibility for user management, role management and reporting residing with the third party outsourcer.

FACING THE CHALLENGES - THE TURNKEY CONSULTING SOLUTION

At Turnkey Consulting we are very familiar with the challenges that can arise through outsource arrangements and are well placed to help you to navigate these, both:

  • Ahead of negotiation for a new contract to ensure you develop an agreement that is most beneficial to both you and your outsource partner, or;
  • In-contract, where you have identified areas for improvement.

POTENTIAL OPPORTUNITIES FOR IMPROVEMENT

ENSURING GOVERNANCE & ACCOUNTABILITY ARE IN PLACE

Despite having a contract in place, it is not always clear who is accountable for decision-making; in particular, approval for changes in process or design. Your organisation may not want to outsource the strategic security design activities, especially as accountability for compliance remains within the company.

We can advise you on what activities to retain in-house in order to maintain ownership, dependent on your organisation’s approach to security, risk and controls.

CREATING AN ENVIRONMENT OF CONTINUOUS IMPROVEMENT

It is often tempting to hand over all responsibility for security administration without providing any guidance on the organisations control requirements, or without consideration for internal and external security threats that may arise over time. The assumption is that the outsource provider will address these as part of the service they are offering, though this is often not the case.

We will help you to understand your risk profile and develop processes to identify future threats that need to be considered as part of your outsource agreement. We can also assist in a QA of your existing processes to identify potential areas for improvement.

INCREASING PERFORMANCE AND QUALITY THROUGH MEASUREMENT

Understanding whether or not you are receiving the level of service you expect is extremely important but sometimes overlooked. Companies tend to measure performance on ticket SLAs but this can be deceptive and does not always give an indication of the quality of service or the level of compliance.

We help to define a scorecard to give you a more accurate reflection of service levels. Our consultants also advise on reporting and quality assurance activities that help you to achieve your objectives.