have a look at our internal control consulting services for SAP environments as well as some reference customers

1. 1
®
the security company for SAP environments
®
the security company for SAP environments
© axl & trax, all rights reserved

2. 2
table of contents
who we are
affiliations and partnerships
mission and principles
expertise
services and solutions portfolio
approach: efficiency and quality
an example of our services
review of the authorization concept
references of customers served
®
the security company for SAP environments
© axl & trax, all rights reserved

3. 3
who we are
fact sheet
15 years expertise
consultant, adviser, trainer and keynote speaker
over 20 dedicated GRC, IAM,
authorizations and security experts
more than 200 customers served
®
the security company for SAP environments
© axl & trax, all rights reserved

4. 4
affiliations and partnerships
affiliations partnerships
®
the security company for SAP environments
© axl & trax, all rights reserved

5. 5
our mission and principles
we focus 100% on risk, security and internal controls
SAP security is our core business
we are the bridge between business and IT
combining theoretical with strong practical experience
utilizing sound knowledge of business processes and data flows
communicating IT security challenges in business language
our principles
security is a business issue – IT is a business enabler
think before you act
kiss – keep it stupidly simple
continuous expertise improvement (15 years) with expert-
consultants certified in the areas of
auditing: CISA; CIA; …
security: CISM; CISSP; CGEIT; CRISC…
SAP, Isabel…
®
the security company for SAP environments
© axl & trax, all rights reserved

6. 6
our expertise
c-range advisory biometric authentication
consultancy identity and access management
audit and security authorization concepts
governance, risk & compliance roles building
training workflow
tailor-made solutions security/risk content (SOD)
ABAP coding security
vulnerability assessment
payment flow security
process controls
quality assurance
licensing (cost control)
®
the security company for SAP environments
© axl & trax, all rights reserved

7. 7
our services and solutions portfolio
assess / improve / implement / monitor
services
access rights
security,
strong process controls, coding perimeter banking
workflow,
authentication PtP review, security security services
master data
cleansing
SAP SAP SAP
Systems Applications
ABAP Infrastructure
Isabel
Development
products
Isabel Corporate
GRC Synchronizer
®
the security company for SAP environments
© axl & trax, all rights reserved

8. 8
our approach: efficience and quality
program /project management
roadmap approach
expert knowledge base strategic
knowledge network
SOD matrices
template roles
…
tactical
methodology
best-of-breed tools
standards operational
tailored approach
“do not try to reinvent the wheel”
®
the security company for SAP environments
© axl & trax, all rights reserved

9. 9
an example of our services
review of the authorization concept
get a clear understanding on the :
quality of the authorization concept
are there any inconsistencies in the concept implementation ?
does the concept embrace properly the business requirements?
is the concept flexible enough for new roll outs and ease of
maintenance ?
are the change process and procedures able to prevent concept erosion
over time ?
access to (hidden) critical functionality, SAP backdoors, …
presence of (potential) SoD conflicts?
root causes of security issues
security gap between what is granted and what is executed
plan to reduce any weaknesses and to improve security
evaluate the value of the security investment
assess the effectiveness of monitoring
®
the security company for SAP environments
© axl & trax, all rights reserved

10. 10
references of customers served - www.axl-
www.axl- trax.com/about/references
®
the security company for SAP environments
© axl & trax, all rights reserved

11. 11
more info ?
contact one of our partners:
johan.hermans
wouter.janssen
frederic.lorand
@axl-trax.com
@axl-
or contact our office:
info@axl-
+32 16 311 000 – info@axl -trax.com
®
the security company for SAP environments www.axl-
www.axl -trax.com
© axl & trax, all rights reserved