The document summarizes Impriva, an IT consulting company that specializes in SAP expertise. It discusses the company's success, expertise in various SAP modules, and GRC (Governance, Risk, and Compliance) services. It also outlines the components of SAP's GRC suite and how Impriva can help clients with access controls, compliance, and risk management using these tools. The document concludes with next steps and contact information.

1. Presentation for:

2. Agenda 1. Our Company’s Success 2. GRC 3. Next Steps

3. IMPRIVA Information Technology Consulting Company based in North America. SAP expertise: Implementation Technical Consulting Development and Quality Assurance Compliance Testing Support and Training Our Project Management capabilities surpass those of our competitors. Years of Experience On Time Deliverables Guaranteed Success Rate

4. Business Summary Our Partnerships – Strategic groupings of the best companies and resources – Enabled us to increase our services and reduce costs. Category Leaders - Market Leaders in the development, quality assurance testing, implementation, and configuration of software, IT solutions and Project Management. Business Model - Highly scalable and repeatable “Service Factory” model for monetizing entire service portfolio. Momentum – consultant network growing - increased bookings and revenue - emerging channel partnerships. Team - Expertise & Experience – Enterprise Software, Business Consulting, and Managed Services. Funding - Self-sustaining and profitable.

5. Our Success to Date Profitable first year. Continued Revenue Growth. 100% of revenue from direct clients in North America. Network of Sr. Level Consultants. 10,000+ sq. ft. Corporate Facility in Fremont, CA.* Additional regional facilities in Phoenix AZ, Portland OR, Decatur IL, Rockville MD, Los Angeles CA and India.* *Obtained through strategic partnership

6. Key Expertise SAP Functional SAP FI/CO SAP SD and Logistics SAP BI and Portal SAP xApp Analytics SAP Security and Authorization SAP CRM and SRM SAP HR including ESS/MSS SAP Technical ABAP - including SAP HR Net Weaver and Basis BI technical experts EDM/MDM technical experts SAP Business User SAP Governance, Risk, and Compliance SAP Access Controls (cert.) SAP Process Controls (cert.) SAP Global Trade Services SAP Enterprise Risk Management SAP Testing and Quality Control/Assurance Functional Integration End User Automation Compliance

7. Quality Resources Proven track record of providing quality consultants to various Clients. Full-time staff of recruitment and HR professionals to support company's growth. Follow and exceed Industry best recruiting methodologies. Easy deployment of resources of rolling off from other clients. Recruitment professionals select the right candidates using systematic behavioral interviewing techniques and possessing intimate domain expertise. Knowledge and sourcing skills, combined with our interpersonal networks in the Indian and American technical professional communities, gives us the ability to find the right candidate on average within one week of posting an available opportunity. Strong technical capabilities to technically screen the candidates - development team who can help in screening the candidates. Week 3 Week 2 Production Week 4

8. Quality Resources Low attrition rate and high subsequent project engagement of consultants - We take very good care of our consultants! Our commitment is to provide a comprehensive HR service that includes the best practices necessary to assure compliance with Department of Labor LCA regulations. Legal knowledge of the H-1B and LCA regulations we have proven that we possess the skills necessary to run a successful H-1B program, including the preparation of Public Access Files and the set-up and maintenance of our in-house LCA tracking systems. Our partners proactively perform spot audits of LCA compliance program and Public Access Files, and can show evidence of our good faith efforts to comply with all Department of Labor regulations. Week 3 Week 2 Week 4

9. Consulting Experience Over 5+ years of proven consulting & staffing experience. We understand Intuitive way of doing business. We understand the procedure and policies to be followed in temp worker staffing. Engaged in SAP, Project Management, Remedy, Business Analysts, Oracle, Web Technologies, DB Admin, Network Infrastructure & Technical Writing, Compliance Practice, HP Quality Center. Local Business Model. Reduction in margin to meet the budget constrains of projects. Willing to convert contractor/consultants to full time intuitive employees with no fee on one to one basis. Meeting IT needs for major Industry leaders as clients. Week 3 Week 2 Production Week 4

10. Agenda 3. Next Steps 2. GRC 1. Our Company’s Success

12. What is SAP GRC? G OVERNANCE ( strategic ) C OMPLIANCE ( tactical ) R ISK ( exposure ) Strategies Goals & Objectives Policies & Procedures Risk Identification Risk Analysis Risk Profiles Risk Response Risk Monitoring Processes Controls Activities SOX GRC-RAR GRC-ERM GRC-CUP GRC-SPM

13. Components of the SAP GRC Suite GRC Module Description Risk Analysis and Remediation ( RAR ) This tool is the “repository” which contains all SOD rules and mitigation controls defined by the Client. User and role reports can be executed to monitor compliance on a risk level. Enterprise Role Management ( ERM ) This tool uses the RAR repository to ensure that all security role changes do not violate the Client’s Global SOD policy. A business approval workflow can be setup for all role changes. Compliant User Provisioning ( CUP ) This tool uses the RAR repository to ensure that all role assignments made to users do not violate the Client’s Global SOD policy. User role requests are submitted via this tool. A business approval workflow can be setup for all user role assignment changes. Super user Privilege Management ( SPM ) Standalone tool that allows users to ramp up their access. All tcodes executed are recorded and emailed to business and technical leads for monitoring purposes.

14. SAP GRC Access Control 5.3 Key Solution Capabilities & Benefits Prevents and identifies access and authorization risks in cross-enterprise IT systems to prevent fraud and reduce the cost of continuous compliance and control Automates detection, remediation, mitigation, and prevention access and authorization risk across the enterprise Integrates cross-enterprise into SAP and non-SAP systems Key challenges addressed Weak support for the audit process to ensure the right measures are in place to prevent fraud Manual or people-intensive compliance processes involving emails, spreadsheets and/or paper Uncontrolled role management Excessive super-user access Document & Audit Streamline Audits Provide Proof Automate Reviews Analyze & Remediate Analyze & Remediate risk Manage by Exception Collaborate Across Functions Embed & Execute Compliant User Provisioning Supervisor Privilege Management Embed Cross-Function Embed Cross-Platform Model & Control SoD Rules & Regulations Corporate Policies Best Practices Enterprise Role Management Identity Management

15. Roles and Responsibilities IT Owner Project Manager Business Lead IT Project Lead Project Team

16. Agenda 3. Next Steps 2. InMyCity 1. Our Company’s Success

17. Contact Us IMPRIVA, Inc. 877.838.9714 www.impriva.com [email_address]