Case Study: Global Pharmaceutical Organization achieves operational and compliance excellence with Protiviti's SAP security optimization

Achieving Operational and Compliance Excellence with SAP Security Optimization

Global Pharmaceutical Organization needed an SAP security architecture that tightly restricted sensitive information while remaining flexible for growth and regulatory complexity. They engaged Protiviti for SAP security optimization and GRC services, leveraging Protiviti’s SAP security expertise and the SAP Access Control solution to align SAP roles, business processes and regulatory requirements.

Protiviti implemented a three‑phase program—role redesign (“Get clean”), SAP Access Control upgrade (“Stay clean”) and governance (“Stay in control”)—to standardize roles, automate provisioning and strengthen access governance. The engagement cut total SAP roles by 50% (vs. a 40% target), reduced SoD conflicts for roles and users to zero, eliminated instances of provisioning or emergency access without proper SoD review/approval, and improved IT regulatory compliance efficiency by 70% (target 25%), materially lowering fraud and compliance risk.