Hadassah Medical Center Reaches New Levels of SAP Optimization & Control with ProfileTailor GRC

Background

A pioneer in adopting innovative technologies, Hadassah Medical Center began implementing SAP® over a decade ago, addressing extended functionalities such as logistics, financial, HCM, and more. By 2010, Hadassah Medical Center required a reliable monitoring and management solution that would assist in controlling SAP activities, as well as handle authorizations within the company – specifically HR/HCM module users.

After assessing other options Hadassah Medical Center chose Appsian’s ProfileTailor GRC solution, particularly for its short implementation process and high-performance level, enabling the organization to best achieve its defined goals. In 2011, with the objective of narrowing authorizations and reducing fraud, Hadassah Medical Center turned to Appsian once again asking to extend the installation of ProfileTailor GRC to include effective analysis of data gathered in the system.

Results

ProfileTailor GRC was implemented successfully at Hadassah Medical Center, delivering detailed reports and accurate results within just three weeks. The organization was able to easily obtain a clear view, in real-time, of all employee activities, as well as effectively manage the allocation of SAP authorizations. The short implementation process saved Hadassah Medical Center 18% in maintenance costs alongside months of tedious manual work.

Following the expansion of ProfileTailor GRC in 2011, Hadassah Medical Center was able to effectively eliminate SAP_ALL users, in addition to closing inactive accounts – significantly reducing authorizations in the organization as demanded. Furthermore, the product’s ongoing monitoring and automated processes facilitated the inspection of sensitive and high-risk activities, reducing fraud and enhancing security across the organization.

Narrowing authorizations by ProfileTailor GRC is based on behavioral profiling analysis, guaranteeing optimized authorization consumption that accurately reflects real SAP needs and usage.

Benefits

• ProfileTailor GRC is installed externally to SAP and requires no changes to the SAP system
• Continuous monitoring in real-time of all SAP users and activities enhances security and control
• User behavior-based profiling achieves optimized authorization usage
• Clear reports for easy and efficient management of the system

“ProfileTailor significantly increased the hospital’s security level by eliminating SAP_ALL authorizations, narrowing authorizations according to actual usage, and removing inactive users. We now have real-time insight into the actual SAP-related activity being performed by our employees.

The implementation took only 3 weeks and has reduced the risk of fraud and breach of privacy, months of manual work were avoided, and 18% has been saved on maintenance costs. We are very pleased with the results and highly recommend Appsian’s solution.”

Rafi Maman, SAP Division Manager,Hadassah Medical Center