Proper segregation of duties (SoD) and access control over key information assets are among the most effective safeguards against fraud and mistakes –and a prerequisite for sound corporate oversight required by various regulatory mandates around the world, such as the Sarbanes-Oxley Act, 8th EU Directive. These are also some of the most difficult controls to deploy and sustain given the thousands of users, roles, and processes that require access and authorization evaluation, testing, and remediation.

The SAP BusinessObjects Access Control application enables all corporate compliance stakeholders – including business managers, auditors, and IT security managers – to collaboratively and continuously control access and authorizations to assets across the enterprise and ensure segregation of duties (SoD) compliance.

The software unifies SoD and access risk analysis and remediation, enterprise role management, compliant user provisioning, emergency privilege management, and privilege attestation and provides a holistic, enterprise-wide view in real time. SAP BusinessObjects Access Control can help you ensure day-to-day compliance, provide comprehensive management oversight, and perform effective and complete audits. As a result, you can improve your ability to protect information and prevent fraud while minimizing the time and cost associated with compliance processes.

SAP BusinessObjects Access Control enables:

• Access control and authorization – Enforce SoD compliance from the start with enterprise-wide role design, documentation, and maintenance that prevent improper access to assets, automatically eliminate access and authorization risks, and enforce best practices.
• Automated compliance – Automate end-to-end processes for access and authorization risk detection, remediation, and mitigation across your enterprise. Plus, increase your process efficiencies and minimize audit time and audit-related costs.
• Real-time oversight and predictability – Support real-time compliance around the clock with real-time reporting, prevent security and controls violations, and provide for faster resolution of issues.