• Setting expectations with a business perspective, presentation and demo of the possibilities of the framework, giving guidance and best practice from experience
• Project Management with the implementation Team (local and international remote) from the design phase, over the realization and testing to the deployment
• Setting the technical understanding and conditions for the implementation of the GRC framework
• Mentored and coached end users and junior team members on features and functionality of RSA Archer

Archer Use Cases: Business Continuity & IT Disaster Recovery Planning, Crisis Management, Data Governance, Information Security Maanagement Systems (ISMS), IT Risk Management, Privacy Program Management, Third Party Catalog

Custom Delopement of Applications: Yes, more than 10

Special Challenges: More than 10 Interfaces, Complex Authorization System, Many different Departments

• Solution Design to achieve the goal of a comprehensive and holistic view of the current state of the SAP landscape
• Initially, the solution design was started with six integrations from the area of code scanner, configuration validation and system recommendation
• The implementation was carried out in collaboration with an international team consisting of employees from the Big Four companies, with support of the local Archer Team
• Development of a central dashboard for compliance control for the central department, but also for the specialist departments

Archer Use Cases:IT Risk Management, IT Security Vulnerabilities Program, Policy Program Management, Business Impact Analysis, Top-Down Risk Management

Custom Delopement of Applications: Yes, more than 5

Special Challenges: Custom Code, SQL Queries, Data Feeds with XSLT, External Interfaces, Custom Developed Utilites

• Coordination and planning with an extended project team
• Consulting the implementation partner and development of the target system
• Support service for technical challenges in relation to the existing environment and further development in risk management

Archer Use Cases: IT Risk Management, Key Indicator Management, Issues Management

Special Challenges: Switch of existing, in production used

Applications and Data, Conceptual Design

• Supervision of the entire life cycle of the GRC platform - from the first thought, through the initial use cases, to the establishment of the service
• Advice and support in all areas: solution design, agile approach, selection of use cases, gathering and analysis of business requirements, implementation, team building (on site and international), setting up service operations
• Main Use Cases: Business Continuity and Crisis Management, IT Risk Management, Compliance Management

Archer Use Cases: Business Continuity & IT Disaster Recovery Planning, Crisis Management, IT Risk Management, Top-Down Risk Assessment, Key Indicator Management, Policy Program Management

Custom Delopement of Applications: Yes, more than 10

Special Challenges: Custom Code, Custom Workflows, Advanced Workflow, Data Feeds with XSLT, External Interfaces

• Development of new approaches in the light of the tight schedule and major dependencies
• Adaptation of the existing platform to the new needs in close coordination with the department
• Extension of the existing platform by additional Use Cases for Risk Deparment

Archer Use Cases: Controls Assurance, IT Risk Management, Financial Controls Monitoring

Custom Delopement of Applications: Yes, more than 6

Special Challenges: Custom Code, Data Feeds with XSLT, External Interfaces

• Design and implement overall eGRC Platform including Compliance, IT Risk Management and Enterprise Risk Management.
• Implemented Processes and Activities in the Organization to fulfill the control and continuous improvement of the Platform.
• Development of further Use Cases in the existing infrastructure

Archer Use Cases: IT Risk Management, IT Controls Assurance, Issues Management, Policy Program Management

Custom Delopement of Applications: Yes, more than 5

Special Challenges: Many Interfaces, Changing Targets