SAP Fraud Management

What Is SAP Fraud Management?

Fraud can be devastating to a business, leading to financial and legal consequences. Fraud management seeks to identify potential areas for fraud across business processes both internally and externally with partners. SAP Fraud Management looks at potential for fraud related to SAP customers. The SAP tool related to fraud management is called SAP Business Integrity Screening.

What Is SAP Fraud Management?

Fraud can be devastating to a business, leading to financial and legal consequences. Fraud management seeks to identify potential areas for fraud across business processes both internally and externally with partners. SAP Fraud Management looks at potential for fraud related to SAP customers. The SAP tool related to fraud management is called SAP Business Integrity Screening.

Governance, Risk, and Compliance (GRC) teams are often tasked with managing fraud, and they deploy many standard GRC strategies to deal with fraud risk. For example, they may put fraud controls into place as well as collect process and transactional data for fraud analysis. Fraud management often integrates into other areas of GRC, such as the broader Risk Management.

Tools for fraud management look to centralize fraud risk data and automate fraud screening and analysis. Fraud management tools may have the following capabilities, among others:

Exception detection and compliance checks
Detection strategy calibration
Exception-based scenario analysis
Business partner screening
Automated workflows and notification
Continuous Controls Monitoring (CCM)
Integrity screening.

Many risk detection and management tools also feature fraud capabilities. For example, Appsian Security’s threat detection and response solutions seek to identify fraud potential from transactional data. Similarly, Fastpath offers tools for risk quantification and transactional controls that can help manage fraud risks. A company like RSM can help organizations establish fraud management programs, including best practices for fraud prevention and detection.

Key Considerations for SAP Fraud Management

GRC and fraud management teams are stretched — in our most recent research into the state of the GRC market, we found they have more responsibility but aren’t growing along with that responsibility. The leading companies in our GRC research are utilizing automation to optimize their GRC resources. For fraud management, this could mean automating controls and detection.
Fraud risk analysis can also be done at the user access level. For example, Lundbeck implemented a Security Weaver tool for segregation of duties analysis to identify the potential for users to commit fraud. Consider how you can integrate fraud management across GRC and security functions.
Centralize your fraud risk data. You are monitoring areas throughout the business for fraud risk. To best manage that fraud risk, you need a single view of where fraud potential exists and which risk holds the most potential harm for the company. This can help your organization prioritize which threats need to be addressed most imminently.

Show more

financial reporting

Is Your P2P at Risk for Fraud?The impact of fraud on today’s businesses and organizations is staggering. While there can be dozens of potential tip-offs that a fraud scheme may be underway, this whitepaper addresses six of the most common that you should definitely have on your radar screen.

Oct 28, 2022

•

1 minute read

How JetBlue Prevents Fraud, Duplicate Payments and Fines

How JetBlue Prevents Fraud, Duplicate Payments and Fines Joni Geurts, Director, Accounts Payable & Fraud at JetBlue Airways, tells her story of joining the AP department and addressing the biggest issue for her team: limited visibility into SAP. She couldn’t get the information she needed about suppliers, identify duplicate payments or flag suspicious supplier payments as potentially fraudulent. Attend this webinar to hear […]

Dec 16, 2021

•

1 minute read

LS Headquarters image

New Security Platform at Lundbeck Helps Ensure Business Continuity and Eliminate Risk of Fraud As one of the most highly regulated industries, the pharmaceutical industry takes an aggressive approach to supply chain risk management. Employing a global security system that supports access governance and authorization areas is critical in preventing fraud and maintaining business continuity. A case study on Lundbeck, a biopharmaceutical company based in Copenhagen, details how it chose a new security platform to not only digitize but automate its segregation of duties (SoD) and privileged access management processes. As an SAP customer, Lundbeck utilizes a hybrid SAP landscape with one instance of SAP ERP and implementations of SAP Ariba, SAP Concur and SAP SuccessFactors. Kirsten Kjerkegaard, Solutions Architect for Access and Security at Lundbeck, explains that her primary mission is to ensure smooth audits and identify and minimize security issues for the company. Prior to implementing its new security platform, she says “the company’s access provisioning process was digitized, but the SoD and privileged access management processes were managed manually through spreadsheets, which created some challenges and cumbersome reporting.” Those challenges included conducting repetitive tasks and analyzing historic data rather than performing exact analysis. How did Lundbeck overcome its challenges? With top management support, the company implemented a solution that provides a holistic and transparent view into SoD conflicts throughout the company’s landscape, while streamlining its automated privileged access by replacing the manual review of audit logs for discrepancies. It was also critical to invest in a ruleset that focused on business processes on the SAP Ariba side of the enterprise, allowing for control implementations that mitigated risks specific to the business. Read this article and learn: - How Lundbeck pursued an automated security platform that met its security needs while integrating with the company’s hybrid SAP landscape; - Why the investment in SoD rulesets is critical to meeting the SoD needs of your business processes and avoiding process inefficiencies; - How Lundbeck now automates audit log review for discrepancies and streamlines the review task.

May 3, 2021

•

10 minute read