Security Weaver RiskCompliance Solutions for SAP Segregation of

Security Weaver Risk/Compliance Solutions for SAP • • Segregation of Duties Emergency Access Secure Provisioning Process Auditor Secure Enterprise License Management Password Reset © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- SECURITY WEAVER Enterprise Application Compliance Simplified! 1

SW: License Management Purpose The purpose of LM module: 1. Manage ERP application licenses 2. Propose cost savings and better utilization of licenses 3. Preparation of SAP audits 4. Automatically make appropriate changes across systems (reclassification of users’ license type) © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- SECURITY WEAVER Enterprise Application Compliance Simplified! 2

SW: License Management Functionality of reports 1. Identify Roles to be removed from user (per tcode usage history) 2. Identify Roles to be remapped to Users (per Role’s license category) 3. Identify Users to be deleted or locked © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- SECURITY WEAVER Enterprise Application Compliance Simplified! 3

Reset Password • The Challenges • IT and/or Help Desk becoming overwhelmed by password requests • Each call can cost $25 -$50 in lost productivity • Password resetting during “off-hours” is especially inconvenient and problematic • Most users average multiple password resets per year! © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- SECURITY WEAVER Enterprise Application Compliance Simplified! 4

Reset Password • The Answers • Easy to calculate ROI- generally pays for itself in 1 st year • RP especially helpful for “off-hours” resets when no one is on duty • RP is simple to install and configure • RP allows your organization to leverage your core SAP competency to deploy and manage it. • RP requires very little infrastructure to deploy and maintain so there is little to no investment in hardware required • RP is very easy to learn so organizations can quickly realize the benefits of the solution © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- SECURITY WEAVER Enterprise Application Compliance Simplified! 5

SAP Focused Compliance Solutions SAP Basis Layer World Class Applications! Designed around the SAP Basis layer, Security Weaver tools are being recognized as world class in terms of performance, scalability, ease of installation and ease of use. Separations Enforcer -- The only true “realtime” SOD Management tool on the market today. Separations Enforcer is delivered with a comprehensive function-based SOD matrix based on based practices. Secure Provisioning -- User provisioning capable of integration with your organizations identity management toolset. Equipped to support the full employee life cycle user administration. Emergency Repair – Based on thought leading design for dealing with an age old problem for providing “secure emergency access” to SAP support staff. Our solution integrates with your existing support staff user ID’s. Role Deriver – Best practices application for standardization and documentation of SAP user role administration. Process Auditor -- Designed to support best practices for SAP process auditing with an embedded, configurable rules engine capable of true, real-time transaction monitoring. Secure Enterprise – A robust integration layer which allows organizations to leverage the Security Weaver application environment in SAP to provide SOD management and role administration for the entire enterprise. © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- Secure Provisioning Process Auditor (Full Life Cycle (Transaction monitoring and auditing) User Access Administration) Role Deriver (User Role Administration) Enterprise Application Compliance Emergency Repair (Emergency Access Management) Separations Enforcer (SOD Conflict Management) S e c u r i t y W e a v e r Secure Enterprise Platform Independent Compliance Integration Layer Enterprise Applications ERP, Legacy, Other SECURITY WEAVER Enterprise Application Compliance Simplified! 6

Contact Information • Russ Sofranko • russ@securityweaver. com • Office: 858 -581 -9126 • www. securityweaver. com © Copyright Security Weaver 2011 All Rights Reserved -- Confidential / Internal -- SECURITY WEAVER Enterprise Application Compliance Simplified! 7