Mann-India SAP Service-Offering for GRC

1. Private & Confidential
1
Mann-India Technologies
August, 2014
Mann-India SAP for GRC

2. Private & Confidential
2
Executive Summary

3. EVOLUTION ACHIEVEMENTS
Private & Confidential
3
Corporate Overview
Incorporated with the millennium in 2000.
Established brand and strong relationship network
Latin America.
Emerging markets as focus geography.
Expertise in legacy modernization and Mobile
platforms.
Competence in developing innovative solutions
driving growth.
Strong Customer satisfaction
An early implementer of the SAP IS Retail solution in
the geography – Plaza Lama in the Dominican
republic
Created a unique Variant based development to
adapt SAP – Production and Costing to the needs of
large scale printing businesses.
Created an entire web based and ABAP module to
mate SAP ECC 6 to the needs of a healthcare
services business including significant automation of
workflow
Successful Implementation of IS GRC in a complex
GRC scenario in a record time of under 3 months
Successful Implementation for Oil & Gas in GRC
operations.
Created an SAP bolton product (Mobile and Web)
called VECE to automate and simplify vendor –
customer interaction through SAP

4. Private & Confidential
4
Noida
Dominican Republic
Panama Venezuela
Puerto Rico
Colombia
New Delhi
Clients and Locations
Corporate Office
Presence
Development center

5. Mann India’s SAP Practice
Private & Confidential
5

6. Private & Confidential
6
Mann India – SAP Snapshot
 Preferred Partner for SAP IS-Banking and IS-Mining in Latin American region
 Deliver Solutions in SAP All-in-One & Business One for Large Enterprises & Small & Medium
Enterprises
 Partners in first SAP IS Mining Implementation LATAM Region in Peru
 Variant configuration in Security Printing in Latin America
 SAP Service & Channel Partner
Mann IndiaTM SAP Expertise
 First company in the World to implement Variant Configuration successfully in a security printing
business.
 First company in Colombia to implement an SAP ERP solution in a leading Healthcare Trading
Business.
 Service & Channel Partner
 Preferred Partner for SAP IS-Banking in Latin American region
 We have worked for PDVSA - Petróleos de Venezuela S.A., the largest company in Venezuela in the
sector of Oil and Gas.

7. Private & Confidential
7
Mann-India ’s SAP Practice
Consulting Business & IT Strategy, Process Optimization, Enterprise Service
Architecture
Implementation &
Rollout
E2E Implementation, BI Solutions, Global Template & Rollout,
Consolidation
Upgrade, Integration
& Development
Version Upgrade, Enterprise Integration, Custom Development
Post Implementation
Services
Application Maintenance, Testing, Administration & Operation

8. Mann-India SAP Service Offerings
APPLICATION
SUPPORT
• Help Desk
• Functional Support
• Technical Support
• Application Maintenance
• Basis Support
• Configuration Services
• Programming Services
• Data Conversions
• User Manual
• Training Manual
• Authorization
• Testing
Private & Confidential
8
LINE OF SERVICE
• Dedicated Practice Leaders
• Competency Development
• Tools & Methodologies
• Training
• Project Management
• Change Management
• Help Desk
• Functional Support
• Technical Support
• Application Maintenance
• Basis Support
• Configuration Services
• Programming Services
• Data Conversions
• User Manual
• Training Manual
• Authorization
• Testing
• Template Design
• Data Conversions
• Regression Testing
• User Manual
• Training manual
• Authorization
• Testing
• Programming Services
• Configuration Services
• Testing
• Programming Services
• Configuration Services
• Testing
• Netweaver
• Portal
• Middleware
• BI & BO
• xApps
• Netweaver
• Portal
• Middleware
• BI & BO
• xApps
• Template Design
• Data Conversions
• Regression Testing
• User Manual
• Training manual
• Authorization
• Testing
• Strategic
• Functional
• Technical
• Delta Training
• Testing
• Strategic
• Functional
• Technical
• Delta Training
• Testing
GLOBAL TEMPLATE &
ROLLOUT
E2E IMPLEMENTATION
VERSION UPGRADE CUSTOM DEVELOPMENT
ENTERPRISE
SASAPP E ERRPP
SAP
Business
Suites
(SCM,
SRM,CRM,
SAP
Business
Suites
(SCM,
SRM,CRM,
PLM)
PLM)
Technology
Netweaver,
Technology INTEGRATION
Netweaver,
BI/BO
BI/BO

9. Key Highlights of Mann-India ’s SAP Practice
Private & Confidential
9
People
• Product implementation coupled with
Effective Project Management
• Functional, ABAP and BASIS expertise
• Expertise on Entire spectrum of SAP
Business suite 7.0 and product
• Domain expertise across industry verticals
focused by Mann-India
• Consultants having implementation skills
and indepth domain experience in Industry
• Consultants not only having experience in IS
(Industry Specific) areas but also in
developing and maintaining automation
systems of the kind
Processes
• Processes aligned to the highest software
quality standard
• Mature and Improvised methodologies for
SAP Implementation / Upgrades / Rollouts/
Migration / Maintenance
• Proven Mann-India Technologies’ customer
centric Engagement Model coupled with
flexible Delivery Model

10. Private & Confidential
10
Representative Client List

11. Private & Confidential
11
Mann-India SAP Verticals
Different Industries Need Different Business Solutions

12. Value Proposition for SAP GRC
 We evaluate your organization’s GRC requirements, perform gap
analysis, review options and provide recommendation
 Our experience adds to your results. Mann India has a complete
blend of audit background, business implementation experience &
compliance knowledge
 Mann India provides cost-effective support to maintain your
Private & Confidential
12
applications
 Lower implementation risk with pre-configuration and best
practices
 Increase your ROI with lowered implementation time
 Seamless and quick integration with minimum impact on your
daily operations
 Incorporated with a quick audit analytic assessment of your
controls
Test Scripts
Training Contents
Master Data Templates
SAP Business Process
Content
Mann India SAP Solution
Building Blocks
Industry Best Practice
Standard Approaches
Blueprint Templates
Custom Enhancements

13. Introduction with Challenges and Approach of GRC
Private & Confidential
13

14. Private & Confidential
14
Why GRC ?
Risk management is no longer an ad hoc activity; it is an integral part of the day-to-day
operations of organizations.
External and internal risk management requirements are becoming increasingly complex and
intrusive, while the demand for more comprehensive and actionable governance, risk and
compliance (GRC) information continues to increase:
Managing risk in silos across different functions, processes, methods and infrastructure
cannot keep up with these requirements
Risk management has become a growing operational and financial burden, limiting the
organizations' ability to keep pace with essential business growth and transformational
initiatives.
To manage today's challenges, leading organizations are driving technology-enabled GRC
transformation programs that can:
Create improved visibility of enterprise risks and how these are mitigated
Lower the cost of risk management through the reduction of manual processes and controls
Increase efficiencies through standardization, simplification, automation and end-to-end
process centralization

15. GRC describes an organization's integrated approach to governance, risk and compliance. It typically
encompasses activities such as governance, enterprise risk management (ERM), internal controls, regulatory
compliance and internal audit.
Governance improves the alignment of risk activities to the strategic objectives of the business. Governance
activities enable clearer accountability and reporting, increase visibility of the risks that matter most to the
organization, and enhance decision-making processes:
•Setting the business strategy and objectives
•Establishing the organization’s culture and values
•Defining the roles and responsibilities of risk governance bodies
•Determining risk appetite
•Setting standards and policies
Risk management embeds risk activities into business functions and processes and helps to ensure
optimization across the enterprise. The following activities allow the performance of predictive analytics to
correlate driver-based performance management and identify trends and anomalies for rapid response:
•Identifying and assessing risk that affect the organizations’ ability to achieve business objectives
•Determining risk response strategies
•Defining control activities
Compliance facilitates controls and processes to meet regulatory and business requirements. The following
activities integrate automated controls measures and continuous monitoring into the transactional processing
cycle, resulting in transparency of risk and controls and the elimination of transactions “at risk”:
•Testing adherence to control activities, policies, standards and commitments
•Addressing issue management, tracking and remediation
Private & Confidential
15
What is SAP GRC ?

16. Private & Confidential
16
Key challenges in GRC
• Non-standardized controls and lack of
visibility of controls
• Lack of processes/tools to protect
• ERP process and control design.
• Siloed risk management processes, leading
to duplicate efforts across
• business units/divisions
• Lack of efficient communication between
business and IT, which leads to gaps
between business requirements and actual
security Implementation
• Lack of technology to support Controls
optimization.
• Inconsistent processes and unclear roles and
responsibilities, leading to gaps in risk
activities
• Labor-intensive processes for role
maintenance, user assignments, and
compliance.
• Tools to support centralization of
reporting and enhance visibility across
the organization
• Risk management that is not anchored in
sound enterprise-wide technology systems,
leading to inefficiency and increased costs
• Difficulties in controlling superuser access
and role management.
• Limited or no integration between
various compliance frameworks.
• Risk management disconnected from
business objectives and performance
management
• High cost of internal and external assurance • Risk management viewed as a
• compliance exercise
• High cost and disruption to management to
operate and test Controls

17. Private & Confidential
17
SAP GRC Approach

18. Private & Confidential
18
SAP solution for GRC

19. Private & Confidential
19
SAP GRC Solution

20. SAP GRC Access Control and Key Benefits
Private & Confidential
20
• Reduce False Positives and focus on analyzing real
issues
• Catch “low hanging fruit” (e.g. Role analysis)
• Focus on SOD issues by functional areas (HR, FI)
and/or risk levels
• Reduce analysis time (BPOs, WPOs, IT)
• Assist with mitigation controls (i.e. documentation
and risk
• acceptance process)
• Aid in monitoring actual execution of conflicting
critical transactions
• Proactively maintain compliance via simulation
• Additionally, provides monitoring capabilities for
firefighter access to Production (i.e. monitor every
transaction used during firefighter session)
Stay in
control
Minimal Time
to
Compliance
Continuous
Access
Management
Effective
Management
oversight and
audit
Risk Identification and Remediation
Rapid, cost-effective and comprehensive
initial clean-up
Risk Identification and Remediation
Rapid, cost-effective and comprehensive
initial clean-up
Complaint User Provisioning
Prevent SoD violation at run time
Super User Privilege Management
Close #1 audit issue with temporary
emergency access
Periodic Access Review and Audit
Focus on remaining challenges during
recurring audits
Risk
analysis,
remediation
and
prevention
services
Cross-enterprise
library of
best
practices
segregation
of duties
rules
Stay Clean Get Clean

21. SAP GRC Process Controls and Key Benefits
Private & Confidential
21
Increase confidence in the effectiveness of controls
•Supports end-to-end enterprise control management with single
solution
Reduce cost without compromising compliance
•Provides centralized control management for automated and
manual controls
Effectively manage business risk
•Enables management by exception
• Prioritizes remediation activities
• Provides management insight into the control
environment

22. SAP GRC Risk Management and Key Benefits
Private & Confidential
22
• Transform risk management process from a silo
approach to a more coordinated and oriented
approach
• Consolidated risk at higher levels of the organization
and evaluate global risk exposure
• Respond intelligently by focusing on key risks,
creating cross-organizational resolution strategies,
and tracking response costs
• Improve visibility and optimize decision making by
aligning risks to strategic priorities and business
objective (enhance risk communications to the
board)
• Monitor key risks in a proactive way through a
standardized and centralized Key Risk Indicator
framework

23. Mann-India Solution Package
Private & Confidential
23

24. Mann India automated approach
 Mann India approach for GRC industries provide preconfigured business Process, which will reduce the
adjustments and hence reduce the time of the project
Private & Confidential
24
Adjustments
within project
Mann India
Solution and
SAP Best
Practice
Standard
System
Adjustments
within project
Standard
System
Traditional Mann India offering
Package

25. Private & Confidential
25
Mann-India GRC offering
o Mann-India has packaged its SAP implementation experience with all companies into a GRC solution accelerator—enabling our highly
professional teams to complete typical projects at an exceptionally fast pace.
o Mann-India GRC solution accelerator includes preconfigured business processes based on industry best practices supporting
requirements in areas including GRC

26. Business Benefits from Mann-India
HHigighheerr r reelilaiabbiliiltityy, ,a avvaailialabbiliiltityy, ,a anndd s seerrvviciceeaabbiliiltityy o off S SAAPP a apppplilcicaattioionnss
InInccrreeaasseedd u uttiliilzizaattioionn o off i nintteerrnnaal la anndd e exxtteerrnnaal lI TIT r reessoouurrcceess
Problem avoidance through Problem avoidance through pprrooaaccttivivee s seerrvviciciningg
Minimal need for investment in support training, troubleshooting, and
infrastructure
Increased competitive edge by ensuring high levels of system availability and
expertise from Mann-India’s CoE
Private & Confidential
26
SSLLAA d drriviveenn s suuppppoorrtt s seerrvviciceess
FFooccuusseedd e exxppeerrttisisee a anndd t taailiolorreedd s suuppppoorrtt s seerrvviciceess
Minimal need for investment in support training, troubleshooting, and
infrastructure
Increased competitive edge by ensuring high levels of system availability and
expertise from Mann-India’s CoE

27. Parque Cibernético, Aut. Las Américas Km. 27 ½, Boca Chica
Santo Domingo
Tel: 809 4807772 / 8094808222
Private & Confidential
27
Gracias
Santo Domingo DOMINICAN REPUBLIC
Email: bdmann@Mann-India .com
Panama City PANAMA
Edificio, Sai Sadan, Calle F, Canjerejo PANAMA
Ph: 00507 – 2413217
New Delhi
B267a, Greater Kailash PartI , New Delhi110 048 , India
Tel: +91 11 416355131415
Fax: +91 11 47104710
Noida
1A/1, Sector 16A, SB Tower
Filmcity Noida, UP201301
Tel: +91 120 4086333
Fax: +91 11 47104710