Case Study: a leading aerospace and defense organization achieves stronger SAP S/4HANA access controls with Protiviti

Leading Aerospace and Defense Organization maps 100% of SoD risks with Protiviti

Protiviti was engaged by a leading aerospace and defense organization facing significant segregation of duties (SoD) and user access risks during its SAP S/4HANA upgrade. Compressed timelines had left excessive access and unresolved SoD conflicts unaddressed at go-live, posing substantial compliance and financial risks in its highly regulated industry.

Protiviti designed and executed a multi-phase remediation strategy, quantifying actual SoD violations and mapping IT controls to mitigate risks within SAP GRC Access Control. The solution automated business process controls across 100% of the SAP functionality used, validated over 120 configuration points, and mapped mitigating controls for all remaining SoD risks. This established a sustainable governance framework, improved audit readiness, and provided real-time operational insights for the organization.