Landscape Deployment Recommendations for SAP Assurance and Compliance Software for SAP S/4HANA SAP SE November 2017
Disclaimer This presentation outlines our general product direction and should not be relied on in making a purchase decision. This presentation is not subject to your license agreement or any other agreement with SAP. SAP has no obligation to pursue any course of business outlined in this presentation or to develop or release any functionality mentioned in this presentation. This presentation and SAP's strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to, the implied warranties of merchantability, fitness for a particular purpose, or non-infringement. SAP assumes no responsibility for errors or omissions in this document, except if such damages were caused by SAP intentionally or grossly negligent. 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 2
Agenda Introduction Methodology & Scope of Landscape Deployment Recommendations Basic Landscape Setups Recommendations for SAP Assurance and Compliance Software for SAP S/4HANA including SAP Business Integrity Screening for SAP S/4HANA SAP Audit Management for SAP S/4HANA SAP Business Partner Screening for SAP S/4HANA SAP Tax Compliance for SAP S/4HANA UI Deployment Recommendations for SAP Assurance and Compliance User Interface 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 3
Introduction Methodology & Scope of Landscape Deployment Recommendations
JEE JEE JEE JEE System Landscapes at Customers Designing the Optimal Landscape Layout Product Roadmaps SAP ERP SAP SRM SAP SCM SAP CRM ERP Components SRM Components SCM Components CRM Components Business Aspects ECC Server AS SRM Server AS SCM Server AS CRM Server AS SAP Solution Manager SAP Business Suite Backend Systems SolMan Content Solution Mng Component SLD Dual Stack SAP NetWeaver Hubs Application Portal Business Warehouse BEx Web Process Integration Operations Costs Architectural Strategy Security Additional SAP BS Instance Portal Content ADOBE EP Core AS JAVA SEM Central BI Content BW AS BICS BI JAVA EP AS JAVA ESR Content ESR&SR PI SLD PI Dual Stack Deployment Recommendations for SAP Products Speed of Innovation Performance & Scalability Legal Aspects Solution Landscape of Customer OS/DB platform strategy IT Aspects SLA & Availability Technical Documentation (Planning, Installation & Configuration Guides, etc.) 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 5
JEE JEE JEE JEE Landscape Deployment Recommendations for SAP Products Guiding Principles SAP ERP SAP SRM SAP SCM SAP CRM ERP Components SRM Components SCM Components CRM Components ECC Server SRM Server SCM Server CRM Server AS AS AS AS SAP Solution Manager SAP Business Suite Backend Systems SolMan Content Solution Mng Component SLD Dual Stack Application Portal Additional SAP BS Instance Portal Content EP Core AS JAVA ADOBE SAP NetWeaver Hubs Business Warehouse SEM Central BI Content BW AS BEx Web BICS BI JAVA EP AS JAVA Solution Landscape of Customer Process Integration ESR Content ESR&SR PI SLD PI Dual Stack High-Level Guidance for optimized Landscape Layouts Deployment Recommendations for SAP Products Allow flexibility by offering different deployment options (not one-size-fits-all) Provide guidance by rating different options Ease decisions by listing pros & cons Simplify consumption of information by using a common methodology Increase reliability by considering SAP product strategy, achieved landscape qualities and cross-product alignment 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 6
Ease Landscape Planning By Stronger Guidance Used Methodology Clear recommendations by categorization of deployment options Possible Exception Only useful for specific use cases Supported by SAP, but limitations might occur Reasonable Alternative Useful choice for certain use cases or customer scenarios Supported and confirmed by SAP s strategy Option III Option II Option I General Recommendation Best choice for majority of typical landscape use cases Recommended by SAP s strategy Accepted by a wide base of customers Goal Consider Outlining main important aspects Optimal trade-off between flexibility and simplicity Applied to main building blocks of SAP products Alternative deployment options typically have different pros & cons Customer individual assessment is not compensated 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 7
High Level Product Overview SAP Business Integrity Screening Prevent Detect Monitor Investigate Powered by SAP HANA SITUATION Exponentially increase of frequency and sophistication of fraud, waste, and abuse Fraud costs public and private enterprises hundreds of billions of dollar each year Diverse and complex fraud schemes and strategies Huge volumes of data from multiple sources Operational and organizational silos Capabilities Decrease fraud losses through real-time detection Improve operational efficiency by automated processes and direct business process integration Improve investigator efficiency with real-time analyses and simulations Maximize detection efficiency by early identification and prediction of future risk Improve process efficiency through real-time monitoring Key Benefits Real-time simulation and modeling More granular detection leveraging predictive analytics Easy and low cost simulations based on real-time data Improved alignment amongst LoB and Fraud Detection Department 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 8
High Level Product Overview SAP Audit Management SITUATION Technology will fundamentally change how audit services are performed Few auditors use integrated audit management solutions with analytical capabilities Integration with Risk and Control management systems and/or the underlying ERM as the key capability needed in the future Cost and Difficulty in implementing respectively are the biggest concerns with the use of technology by internal audit Capabilities Full coverage of the audit roadmap, including planning, preparation, execution, report, and follow-up Risk-based audit planning with risks pulled from SAP Risk Management and controls from SAP Process Control Clear and intuitive user interface design that improves user experience and boosts efficiency Analysis of big data through integration with SAP Fraud Management Key Benefits Automate non-negotiable assurance activities, sharpen audit planning with risk based tools and increase productivity with mobile capabilities Integrate and align for continuous assurance Shift internal audit from policeman to trusted advisor, leverage analytics solutions from SAP and SAP HANA to focus on enterprise level issues and opportunities today and tomorrow vs. the past 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 9
High Level Product Overview SAP Business Partner Screening Alert? = or or or SITUATION Companies must screen, identify and know their business partners Strict enforcement in EU and US Digital commerce & increased onboarding options lead to massive increases in number of business partners Businesses getting bigger with new channels and new systems to be integrated Time to value is getting shorter Capabilities Mass, Real time and delta screening for high volume environments Management of multiple and different type of lists (sanction, PEP, adverse media) Intelligent whitelisting Business controlled flexibility & functionality - Enable Compliance Owners to independently manage key screening parameters. Workflow driven resolution Full audit trail Social Network Analyzer to visualize relationships Key Benefits Risk based strategies to reduce number of alerts 1 click resolution screens to efficiently drive decisions Pre-integrated with SAP Master Data Governance Feeder system agnostic with simple open interfaces for ease of integration with varied systems and applications Tackle weak alias in delta files leading to reduced false positives 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 10
High Level Product Overview SAP Tax Compliance SAP HANA SITUATION Tightened Rules for voluntary disclosure leading to tax amnesty Extended audit capabilities by the tax authorities Personal Liability and risks for corporates in case of insufficient tax compliance All larger companies face a coherent risk of a delayed or insufficient payment of value added tax Capabilities Flexible definition of rules to detect wrong postings Simulation of rules for rule optimization Flexible scheduling and execution of rules Initiation, Execution and documentation of correction steps Reconciliation support for Value Added Tax declaration SAP and non-sap data sources Key Benefits Continuous identification of wrong postings enables corrections in current declaration period Simplified and fastened period closing process Reduction of liability and legal risks Prevention of violation of supervisory duties by tool based and permanent monitoring 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 11
Scope of Landscape Deployment Recommendations Building Blocks in System Landscapes for ACS SAP S/4HANA UI for Is Add-On to S/4HANA Considered main usage scenarios Complete usage SAP Business Integrity Screening for S/4 only SAP Audit Management for S/4 only SAP Business Partner Screening for S/4 only SAP Tax Compliance for S/4 only AS primary DB connection SAP HANA System for S/4HANA S/4 Data Reads S/4 data HANA Content Considered main building blocks SAP Add-On to SAP S/4HANA SAP content for SAP HANA SAP User Interface Add-On (Fiori UI) SAP HANA 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 12
Basic Landscape Setups Recommendations for
Scenario I Complete usage
Deployment of SAP Assurance and Compliance Software for S/4HANA Add-On Deployment in SAP S/4HANA System General Recommendation SAP BIS, SAP Audit Man., SAP BPS, SAP Tax Compliance deployed as Add-On to SAP S/4HANA SAP locally used in SAP S/4HANA SAP ACS deployed on a shared AS and SAP HANA system with SAP S/4HANA All required business data is available in the SAP S/4HANA system Example SAP S/4HANA AS UI for primary DB connection SAP HANA System for S/4HANA S/4 Data SAP HANA Is Add-On to S/4HANA Reads S/4 data HANA Content Benefits Combined adoption of new SAP ACS innovations for SAP Business Integrity Screening, SAP Tax Compliance, SAP Audit Management and SAP Business Partner Screening possible No data replication required Better integration possibilities between S/4HANA and ACS applications Simplified System Landscape Considerations Integration with multiple SAP ERP/other SAP and non SAP systems is not possible within (*) SAP HANA and AS innovation & patch strategy needs to be aligned across S/4 and ACS applications (e.g. regarding minimum HANA and NW versions) Same innovation speed of SAP Business Integrity Screening, SAP Tax Compliance SAP Audit Management and SAP Business Partner Screening required Sizing needs to be aggregated across S/4, BIS, AM, BPS, TC (*) Data which has been integrated via S/4HANA Business APIs (e.g. Central Finance APIs) can also be used with 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 15
Deployment of SAP Assurance and Compliance Software for S/4HANA Hub Deployment in SAP S/4HANA System Not Supported SAP BIS, SAP Tax Compliance centrally integrated with multiple business applications (e.g. SAP ERP or S/4HANA on premise) via Database Replication Example SAP ERP * SAP ERP ERP ERP Replication of ERP data SAP S/4HANA AS UI for Is Add-On to S/4HANA primary DB connection Implications Database Replication to SAP not supported Integration with multiple SAP ERP/other SAP and non SAP systems is not possible within (*) Use Product SAP Assurance and Compliance Software for deployment as central Product Hub (See link) SAP S/4 HANA SAP HANA System for S/4HANA S/4H Replication of S/4H data S/4 Data SAP HANA Reads S/4 data HANA Content (*) Data which has been integrated via S/4HANA Business APIs (e.g. Central Finance APIs) can also be used with Application System Application System NON SAP NON SAP Replication of Non SAP Data (*) or other SAP Application 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 16
Scenario II BIS usage only
Landscape Deployment of SAP Business Integrity Screening for S/4HANA Add-On Deployment in SAP S/4HANA System General Recommendation SAP Business Integrity Screening for S/4 deployed as Add-On to SAP S/4HANA SAP locally used in SAP S/4HANA SAP deployed on a shared AS and SAP HANA system with SAP S/4HANA All required business data is available in the SAP S/4HANA system Example SAP Businesss Integrity Screening embedded in SAP S/4HANA UI for Is Add-On to S/4HANA Benefits Embedded Usage of SAP Business Integrity Screening for S/4 No data replication required Better integration possibilities between S/4HANA and Business Integrity Screening. Example: Payment Run Integration Simplified System Landscape AS primary DB connection SAP HANA System for S/4HANA S/4 Data Reads S/4 data SAP HANA HANA Content Considerations Integration with multiple SAP ERP/other SAP and non SAP systems is not possible within (*) SAP HANA and AS innovation & patch strategy needs to be aligned across S/4 and ACS applications (e.g. regarding minimum HANA and NW versions) (*) Data which has been integrated via S/4HANA Business APIs (e.g. Central Finance APIs) can also be used with ACS 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 18
Scenario III AM usage only
Landscape Deployment of SAP Audit Management for S/4HANA Add-On Deployment in SAP S/4HANA System General Recommendation Single usage of SAP Audit Management and SAP Process Control/SAP Risk Management SAP Audit Management for S/4 deployed on a shared AS and SAP HANA system with SAP S/4HANA and with SAP Process Control/Risk Management for S/4 Integrated usage of SAP Audit Management, SAP Process Control and SAP Risk Management to support 3 lines of defense methodology Example SAP Audit Management embedded in SAP S/4HANA AS primary DB connection SAP HANA UI for Is Add-On to S/4HANA SAP HANA System for S/4HANA S/4 Data Audit: Import Data Reads S/4 data HANA Content PC/RM Benefits Integration between Audit Management, Process Control and Risk Management Lower TCO due to shared SAP HANA and AS Gain the unified view of risk Improve the efficiency with better support for the collaboration among risk, compliance, and assurance Considerations SAP HANA and AS innovation & patch strategy needs to be aligned across S/4, and PC/RM (e.g. regarding minimum HANA and NW versions) PC and RM have to run on SAP HANA More complex SAP HANA sizing Consider HANA resource management to ensure sufficient resources for each application 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 20
Landscape Deployment of SAP Audit Management for S/4HANA Add-On Deployment in SAP S/4HANA System Reasonable Alternative Single usage of SAP Audit Management embedded in SAP S/4HANA SAP Audit Management for S/4 deployed on a shared AS and SAP HANA system with SAP S/4HANA Integration with SAP Process Control/Risk Management on separate system SAP Audit Management Embedded in S/4HANA UI for Is Add-On to S/4HANA Audit: Import Data SAP PC/RM PC/RM Benefits Embedded Usage of SAP Audit Management for S/4 Simplified System Landscape Integrates with existing SAP Process Control/Risk Management System AS primary DB connection SAP HANA System for S/4HANA S/4 Data Reads S/4 data HANA Content Example Considerations SAP HANA and AS innovation & patch strategy needs to be aligned across S/4 and ACS applications (e.g. regarding minimum HANA and NW versions) SAP HANA 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 21
Scenario IV BPS usage only
Landscape Deployment of SAP Business Partner Screening for S/4HANA Hub Deployment in SAP S/4HANA System General Recommendation SAP BPS integrated with multiple business applications (e.g. SAP MDG, SAP S/4HANA, Non SAP systems) SAP BPS for S/4 deployed on a shared AS and SAP HANA system with SAP S/4HANA All required business data is accessed locally or transferred via WebService/RFC to the SAP BPS system SAP BPS embedded in SAP S/4HANA AS primary DB connection SAP HANA UI for Is Add-On to S/4HANA SAP HANA System for S/4HANA S/4 Data Reads S/4 data MDG HANA Content BPS: Address Screening WebServices or RFCs MDG Integration Example Application Application System System SAP SAP Benefits Embedded usage with SAP S/4HANA and Master Data Governance Integration with multiple SAP and non SAP systems possible Central maintenance Address Screening Lists Central maintenance of Screening Logic Central Alert management Considerations SAP HANA and AS innovation & patch strategy needs to be aligned across S/4, (e.g. regarding minimum HANA and NW versions) Integration with other application systems only via WebServices/RFC, not via database replication 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 23
Scenario V Tax Compliance usage only
Landscape Deployment of SAP Tax Compliance for S/4HANA Add-On Deployment in SAP S/4HANA System General Recommendation SAP deployed as Add-On to SAP S/4HANA SAP used locally in SAP S/4HANA SAP deployed on a shared AS and SAP HANA system with SAP S/4HANA All required business data is available in the SAP S/4HANA system Example SAP Tax Compliance embedded in SAP S/4HANA UI for Is Add-On to S/4HANA Benefits Embedded Usage of SAP Tax Compliance for S/4 No data replication required Better integration possibilities between S/4HANA and SAP Tax Compliance Simplified System Landscape AS primary DB connection SAP HANA System for S/4HANA S/4 Data Reads S/4 data HANA Content Considerations Integration with multiple SAP ERP/other SAP and non SAP systems is not possible within (*) SAP HANA and AS innovation & patch strategy needs to be aligned across S/4 and ACS applications (e.g. regarding minimum HANA and NW versions) (*) Data which has been integrated via S/4HANA Business APIs (e.g. Central Finance APIs) can also be used with ACS SAP HANA 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 25
UI Deployment Recommendations for
Landscape Deployment of SAP HANA User Interface Embedded Deployment of UI for ACS and Gateway in SAP S/4HANA System Is recommended when UI for S/4HANA is co-deployed with S/4HANA backend UIs for SAP technically adopted with product SAP Assurance and Compliance for S/4 UIs for SAP locally integrated with backend functionality UIs for SAP co-deployed with S/4HANA and ACS backend on same AS system Example SAP S/4HANA UI for Is Add-On to S/4HANA AS primary DB connection Benefits Automated installation & configuration with ACS backend functionality UI and backend application automatically in sync Lower alignment and regression test effort for updates (only ACS concerned) No additional frontend system needed, simplified system landscape Lower maintenance effort Cross-integration with other SAP S/4HANA Fiori UI applications possible SAP HANA System for S/4HANA S/4 Data SAP HANA Reads S/4 data HANA Content Considerations This scenario should be chosen when UI for S/4HANA is co-deployed on the S/4HANA backend server Innovation speed of ACS UIs closely coupled with ACS backend 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 27
Landscape Deployment of SAP ACS User Interface Deployment of SAP HANA UIs on central SAP Fiori Frontend Server Is recommended when UI for S/4HANA is deployed on central SAP Fiori Frontend Server UIs for SAP HANA technically adopted with product SAP Assurance and Compliance UIs for SAP HANA co-deployed with SAP Fiori UIs of other applications on central Fiori Front-End Server SAP Web Dispatcher FiorI Front-End Server UI for Fiori UIs other applications S/4 Fiori UIs UI Add-On Gateway Server Example SAP S/4HANA AS primary DB connection SAP HANA System for S/4HANA S/4 Data SAP HANA Is Add-On to S/4HANA Reads S/4 data HANA Content Benefits Cross-Integration with other Fiori UI applications possible Considerations UIs for SAP ACS not shipped separately, but only as part of SAP Strict version dependencies with SAP ACS backend application, frontend and backend parts need to be kept in sync Patching/Upgrade of SAP ACS UI requires patching/update of Fiori Frontend Server Alignment and regression test effort for other UI applications needed after update of AS of Frontend Server Additional WebDispatcher required 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 28
Landscape Deployment of SAP ACS User Interface Deployment of SAP ACS UIs for S/4HANA and of SAP ACS UIs on central SAP Fiori Frontend Server Not Supported UIs for SAP HANA together with UIs for SAP ACS co-deployed with SAP Fiori UIs on central Fiori Front-End Server SAP Web Dispatcher FiorI Front-End Server UI for UI for ACS Fiori UIs other applications ACS ACS Backend AS SAP S/4HANA Is Add-On to S/4HANA Implications UI for and UI for ACS can not be deployed together on one Fiori Frontend Server One of the UIs has to be deployed together with the ACS backend system. Only one UI component can be deployed on the central Fiori Frontend Server. S/4 Fiori UIs SAP HANA System for ACS AS UI Add-On Gateway Server Example HANA Content ACS SAP HANA primary DB connection SAP HANA System for S/4HANA S/4 Data SAP HANA Reads S/4 data HANA Content 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 29
Additional Information SAP Help Portal SAP Business Integrity Screening for SAP S/4HANA SAP Tax Compliance for SAP S/4HANA SAP Audit Management for SAP S/4HANA SAP Business Partner Screening for SAP S/4HANA Product Availability Matrix 2017 SAP SE or an SAP affiliate company. All rights reserved. Customer 30