APM Demo

1. APM Demo March 11, 2007 realtime Confidential

2. Contents • Overview • APM Role Management • APM Risk Management • Q & A realtime Confidential

3. Who We Are - realtime SAP ISV & IVN Partner NetWeaver Certified Biometric Identity Management Risk & Role Management 200 Global Fortune Clients Established in 1986 realtime Confidential

4. bioLock SAP Security Solutions mySAP Security Solutions Compliance Four-Tier APM balance Cost Usability realtime Confidential

5. APM Overview • Authorization Profile Management • Developed by realtime in 1997. • Complete solution for SAP role management, audit assessment and Sarbanes-Oxley compliance. • Pre-delivered with Risk and Process Analysis cases. • Installed at over 150 Fortune 500 and other companies such as Marathon Oil, US Army, Merck AG, Schwarz-Pharma AG, Siemens and Toyota. realtime Confidential

6. Contents • Overview • APM Role Management • APM Risk Management • Q & A realtime Confidential

7. APM Role Management • Role Management • Collaborate with Business to identify authorization for Role Generation via Authorization Trace • Customizable Derived Role reduces maintenance cost by reducing the number of roles • Mass Change function reduces administration cost • Accelerate implementation realtime Confidential

8. APM Role Management • Authorization Trace Benefits • Defined from the SAP point of view in cooperation with the Business. • No need to learn how SAP-System trace is handled. • Easily troubleshoot and resolve authorization issues. • The logged authorizations represent the minimum specifications. • Retrieves to workspace for role generation or add to existing role. realtime Confidential

9. APM – Authorization Trace Set Traces against one or more Users realtime Confidential

10. APM – Authorization Trace Traced data are imported into APM for analysis and Role Generation realtime Confidential

11. APM – Role Management • Customizable Derived Role Benefits • Builds flexible and customizable roles inherited from a Master template • Reduces maintenance cost realtime Confidential

12. SAP – Profile Generator Derived Role Only Org. Data can be modified! realtime Confidential

13. APM – Customize Derived Role Organizational and Inherited Authorization can be modified realtime Confidential

14. Contents • Overview • APM Functionalities Discussion • APM Role Management • APM Risk Management • Q & A realtime Confidential

15. APM – Risk Management • Risk Management Overview • Identifies Sensitive Access (SA) and Segregation of Duties (SoD) • Defines SA & SoD at Transaction and/or Authorization Field Value • Proactive Risk Analysis • Inactivates pre-defined authorization • Performs user provisioning Risk Simulation • Real-time Reporting and Monitoring realtime Confidential

16. APM – SA & SoD Definition Document additional Risk Description Document Mitigating Controls and Exceptions Email changes to Risk Owner realtime Confidential

17. APM – Risk Management • Proactive Assessment • Inactivate pre-defined risk • Flags critical authorization realtime Confidential

18. APM – Risk Management Reporting • 3-Level Simulations • Single Roles • Profiles • Transactions realtime Confidential

19. APM – Risk Management Reporting • Realtime Process Analysis • Detailed User, Role, and Auth. Value • Cross Clients/Systems realtime Confidential

20. APM – Risk Management Reporting ALV Reporting View realtime Confidential

21. APM – Risk Management Reporting 3 Levels of Reporting View realtime Confidential

22. APM – Risk Management Monitoring – Supervisor may periodically review, approve, disapprove, and document realtime Confidential

23. APM – Risk Management Approval History realtime Confidential

24. APM – Risk Management Risk Change Management History realtime Confidential

25. APM – Special User Monitors executed Programs & Transactions realtime Confidential

26. Questions realtime Confidential