Tech Talks Daily
00:28:29 · Chris Radkowski
[00:28:29] S1: Great questions, Neil. So... Yeah. So at PathLock, you know, we focus on application access governance and controls associated with that. And so, you know, your Sarbanes Oxley controls include, you know you know, segregation of duties controls, being able to manage urgent and, you know, firefighting or emergency access scenarios, ensuring that users have the right entitlements that are aligned with the business process that they're that they're they're involved with. And so any of the controls, ITGCs, SOX controls, definitely anything having to do with access governance is critical to consider in your your s four HANA transformation. Because when you move from, you know, ECC to s four, the the structure of the entitlements in the s four system is different. You have you have Fiori for your Fiori tiles, and there's a lot of changes in in the underlying transactions themselves. Some of them don't exist. So if you're relying on a particular transaction in your controls, your compliance reporting, that that transaction may not exist anymore. So it's important to consider the role design, the process by which you assign and manage user access, the processes by which you certify that user... Those user accesses periodically, you know, emergency access for sure, all upfront in the design process. Because the last thing you want is when when you go live to have some kind of issue, some kind of finding that will affect your your company's value or could potentially impact your supply chain in some way. And so you need to make sure that user access and your role structures, your governance processes are all in place very early in the program. You wanna leverage access governance processes to manage team members who are involved with the s four transformation team. Because the last thing you want there is to have a developer, you know, having access, you you know, to to a a powerful role in a live system. You know? You you wanna... You don't wanna go live with that kind of... This kind of entitlements in place. And so access governance really plays a critical role. And one of the main things is ensuring that you don't have an issue. You don't have a segregation of duties issue. You don't you don't create a situation that could impact your impact your your your controls, effectiveness, and could...
00:31:01 · Chris Radkowski, Neil C. Hughes
That could result in some kind of material weakness or finding later on. The the challenge we see, Neil, though, is it Yeah. For organizations that have already started, you know, their their focus is going live. Everything. It's all all hands on deck. There's a lot of money being spent on the on the transformation itself. It's like, you know, we're just gonna... We can't delay it one day. If possible, we're not gonna take on any additional efforts. And so that's a challenge you have in your organization. To fight to fight the... Hey. There could be a risk of, an event after lie... After we go live unless we take care of this now versus, hey. We're spending a lot of money on this. We're going live no matter what. We've gotta get these, expensive consultants off the off off the payroll. [00:31:54] S0: And I think that is a powerful moment to end on. And for anyone listening, they're not on... You don't have to be on your own on this journey. And, obviously, we've covered a lot in a short amount of time. But for anyone that wants to continue this conversation with you, your team, find out more about how you might be able to help at Pathlock, where should they be going? [00:32:13] S1: Definitely reach out. Check us out at www.pathlock.com. My email address is chris.radkowski@pathlock.com. I'm also Chris radkowski on LinkedIn. So reach out. Let us know your stories, and we love hearing about it, and we'd love to help you with your access governance and compliance challenges. Hey. So thanks so much, Neil.
00:32:13 · Chris Radkowski, Neil C. Hughes
[00:32:13] S1: Definitely reach out. Check us out at www.pathlock.com. My email address is chris.radkowski@pathlock.com. I'm also Chris radkowski on LinkedIn. So reach out. Let us know your stories, and we love hearing about it, and we'd love to help you with your access governance and compliance challenges. Hey. So thanks so much, Neil. [00:32:37] S0: No. Thank you. I will include links to everything there. Well, to the website and to your LinkedIn page for sure. I'll encourage people to check that out, and please, feedback to me. Let me know what your, what's working, what isn't, everything in between. I love to keep this conversation going, but thank you for starting it today. Really appreciate your time. [00:32:57] S1: Great. Thank you.
00:32:58 · Neil C. Hughes
[00:32:58] S0: I think Chris's examples bring access governance right back to the business processes that it supports. When an ERP system cannot perform its job, the consequences can reach the factory gate, the supply chain, and financial reporting. And I really appreciate that distinction between having a permission and using it. And understanding both, I think, helps teams decide what access remains appropriate and what activity deserves further investigation, especially when agents and integrations are involved. And the takeaway for myself is address role design, access reviews, and emergency access while planning a transformation. Because leaving those decisions until after go live can make them harder to resolve when the pressure is on to keep operations running. And we all know that that stuff will blindside you, usually on a Friday afternoon. I don't know why it's always a Friday afternoon, but it usually is. So a big thank you to Chris from Pathlock for joining me here on Tech Talks Daily. You'll find his contact details, company resources, etcetera, in the episode notes over at techtalksnetwork.com. But over to you. Where are access controls creating uncertainty in your organization? What would you change before your next transformation? What does your identity access management look like when we're talking about adding teams of agents into the mix too? Let me know your thoughts by sending me a quick audio message at tech talks network dot com. Everything you need should be over there, so give me a shout. But I have taken up far too much of your time, so time for me to go now. I'll be back again tomorrow. Thanks again. Bye for now.