We recognise that many organisations choose to outsource their IT, including SAP security-related activities. This is often delivered as a managed service back to the organisation, with responsibility for user management, role management and reporting residing with the third party outsourcer.
At Turnkey Consulting we are very familiar with the challenges that can arise through outsource arrangements and are well placed to help you to navigate these, both:
Despite having a contract in place, it is not always clear who is accountable for decision-making; in particular, approval for changes in process or design. Your organisation may not want to outsource the strategic security design activities, especially as accountability for compliance remains within the company.
We can advise you on what activities to retain in-house in order to maintain ownership, dependent on your organisation’s approach to security, risk and controls.
It is often tempting to hand over all responsibility for security administration without providing any guidance on the organisations control requirements, or without consideration for internal and external security threats that may arise over time. The assumption is that the outsource provider will address these as part of the service they are offering, though this is often not the case.
We will help you to understand your risk profile and develop processes to identify future threats that need to be considered as part of your outsource agreement. We can also assist in a QA of your existing processes to identify potential areas for improvement.
Understanding whether or not you are receiving the level of service you expect is extremely important but sometimes overlooked. Companies tend to measure performance on ticket SLAs but this can be deceptive and does not always give an indication of the quality of service or the level of compliance.
We help to define a scorecard to give you a more accurate reflection of service levels. Our consultants also advise on reporting and quality assurance activities that help you to achieve your objectives.