8/24/12
Information Systems Audit and Control Association – Silicon Valley Conference
(ISACA – SV)
“Benefits and Potential Drawbacks to Implementing SAP as a
Hosted Solution; Run SAP Like a Factory
Factory Controls
Agenda – Run SAP Like a Factory
•
•
•
•
•
•
•
•
•
Introduction
• Mark Richter, Founder and President
• About iStreet
Business Architecture, Governance, Risk, & Compliance
• ASAP Methodology
Benefits, Controls, On Premise vs. Hosting
Simple Functional SAP module solution initial output
Technology Architecture; Options
Bringing it all together; SSAE 16, SAP Hosting Audit
SAP Solution Manager: ITIL
Reports: SLAs & OLAs
Contact Us: Follow, Like, or Connect. We’ll follow back
• Twitter - @hostingsap
• Facebook – facebook.com/istreetsolutions
• LinkedIn - linkedin.com/in/markgrichter
About iStreet
Offices in Sacramento, CA
Enterprise data center in West Sacramento
Metro Ethernet enabled: On net to over 9,000 building in N. CA
Certified SAP Hosting Services Partner since 2005
Recertified in 2007, 2009, 2012
Primary Focus
–
–
–
–
SAP, Microsoft, Oracle Managed Platform Services
Private Cloud and Dedicated Servers
Infrastructure (Colocation)
Disaster Recovery
Business Architecture:
Governance, Risk, & Compliance
Governance Management
Managed Platform Services
For SAP All-In-One; On Premise or Hosted
Business Suite Applications
ERP / CRM / SRM / SCM etc.
Customer Team Designs,
Installs & Configures the
application, Monitors
& Maintains
Operation Software
OS / DB / SAP Basis
Infrastructure
Servers / Storage / Telco
Customer Team or
Hosting/Cloud Provider
Designs, Installs, Monitors
& Maintains
Development - Test - Production
For both new and existing installations!
Benefits of Hosting SAP on premise
•
•
•
•
•
•
Control success of blueprinting, realization, go live, ongoing
Have controls in place for governance, risk, & compliance
Control IT, staff, SLAs, OLAs
Use existing staff. Train or hire to fill gaps. Hire SAP specialists.
Use existing or upgraded network, data center and IT. Procure
new where needed.
Have adequate budget for all support.
Business Suite Applications
ERP / CRM / SRM / SCM etc.
Operation Software
OS / DB / SAP Basis
Infrastructure
Servers / Storage / Telco
Customer Data Center
Customer Managed
Hosted on Provider’s Cloud Platform
Business Suite Applications
ERP / CRM / SRM / SCM etc.
Operation Software
OS / DB / SAP Basis
Infrastructure
Servers / Storage / Telco
iStreet Sacramento CA
or Remotely Managed on Your Platform
Business Suite Applications
ERP / CRM / SRM / SCM etc.
Operation Software
OS / DB / SAP Basis
Infrastructure
Servers / Storage / Telco
Customer Data Center
iStreet Sacramento CA
Are Hosted/Cloud Management Services Right for You?
•
•
•
•
•
Is standing up your Development, Test, and Production environments on
your project’s critical path?
Ø Provider’s experienced team can very likely do it faster
Are you interested in reducing the Total Cost of Ownership of your SAP
landscape?
Ø Provider leverages staff across multiple client landscapes
Do you need to hire a new team to support your SAP landscape, or have
trouble hiring and/or retaining skilled SAP professionals?
• Take that one off the table….let the Provider handle it
Are you unhappy with the quality of service your SAP team provides?
Ø Find a Provider driven by relentless adherence to standardized
processes and procedures to “routinize” all client work
Are you under pressure to reduce or avoid altogether up-front capital
outlays?
Ø Spread up-front costs over the life of your service agreement
Why SMBs choose hosting
Hosted/Cloud Platform Management Solutions:
Ø Reduce time-to-market
Ø Lower Total Cost of Ownership (TCO)
üIndustry analysts estimate 20-50% cost
savings per user/month
Ø Free up IT staff for higher value-added projects
Ø Reduce risk during project implementation
Ø Provide scalable, flexible solutions that are easily
adapted to changing requirements
Ø Reduce employee training at startup
Ø Run SAP Like a Factory
SAP Hosting Audit of Controls
The Factory
•
•
•
•
•
•
•
•
•
Audit Area
# Controls
SAP Service Portfolio
10
Skills and Certifications
12
Data Center
23
Network and Connectivity
8
Managed Backup and Disaster Recovery
22
IT Service Management Support Processes
23
IT Service Management Delivery Processes
16
SAP Application Hosting
25
Project Management
14
Managed Backup and Disaster Recovery
Check
• Centralized backup infrastructure
• Fully automated redo-log backup
• Recovery tests done regularly
• Backup media retention time >= 28 days
• Maximum loss of productive data = 0 minutes (data is mirrored
synchronously to a separate fire protection area)
• DR data center mirrored SAP systems across two DCs
IT Service Management Support Processes
The Factory Monitoring and Control System – SAP Solution Manager
Check
• System monitoring integrated into Service Desk implemented with tool
support
• Tool supported escalation management
• Defined standard service requests with a predefined procedure
• Service Desk, Incident Management, Problem Management, Change
Management implemented with IT Service Management tool support
• Configuration Management integrated in ITSM tool
SAP Solution Manager
SAP Solution Manager
IT Service Management Delivery Processes
Check
•
Service Level Management implemented, SLA Reports, tool supported - covering all
agreed SLAs
•
Customer satisfaction surveys at least once per year
•
Capacity, Availability, Service Continuity/Business Continuity Management
implemented
•
Company security policy available, Security Officer
•
Internal & external security audits and vulnerability tests done regularly
SAP Solution Manager
SAP Application Hosting
Check
• Automated system monitoring (ping, hard disk, CPU and basic network monitoring)
• Operation manual reviewed regularly, System landscape diagrams
• Automated SAP system monitoring (update tasks, tablespaces, short dumps, ...)
• SAP EarlyWatch Alert activated for all productive systems
• SAP E2E Standards for Solution Operations implemented
• Usage of Run SAP Best Practices for Solution Operations
Monitoring SAP BASIS
SAP Solution Manager
Data Center Compliance
Statement on Auditing Standards SSAE 16 SOC 2 Type II
The iStreet data center in Sacramento, CA is
compliant with the American Institute of Certified
Public Accountants’ (AICPA) publication on SSAE
16 auditing standards included in both the AICPA
professional standards and in the Public Company
Oversight Accounting Board (PCAOB) professional
standards.
Allows qualified customers to assess internal
controls over financial reporting in accordance with
Section 404 of The 2002 Sarbanes-Oxley Act and
with the PCAOB’s auditing standards.
SAP Hosting Monthly Reports
Key Performance Areas
SAP Application Performance
Accomplishments
Recommendations
Service Change Order Summary
Service Request Summary
Incident Summary
Call Center Summary
System Outage Summary
System Availability
Application Outage Summary
Application Availability
CPU Utilization
Memory Utilization
Disk Utilization
Total Landscape Disk Allocation
Backup Status
Non-Prime Shift Work
Service Boundaries
System Specifications
Conclusion
Run SAP Like a Factory
•
Contact Us: Follow, Like, or Connect. We’ll follow back
• Twitter - @hostingsap
• Facebook – facebook.com/istreetsolutions
• LinkedIn - linkedin.com/in/markgrichter
You concentrate on your business.
We’ll concentrate on your SAP infrastructure.
For more information contact:
877-595-8479
[email protected]
Or your local SAP Account Executive
Summary - Key Components
Servers and Storage
“Dedicated” and “virtual” servers, with either integrated disk or SAN storage, depending on the
customer’s current and anticipated future requirements. Relationships with many of the leading
enterprise-class hardware, operating system and database vendors ensure compelling
price/performance solution irrespective of changes in vendor capabilities over time.
Failover and Disaster Recovery
Customer requirements for Recovery Time Objective (RTO) and Recovery Point Objective
(RPO) for both localized and facility-wide failures drive many platform decisions.
Summary - Key Components
Networks
A variety of network connectivity solutions for your SAP users, ranging from VPN over the
public network to private circuits to Metro Ethernet with customer-specific local domains.
Solutions to enable business partner and public access to your applications are available.
Production Operations
The job doesn’t end when the new system goes live – there are a myriad of platform
management tasks that require SAP-specific skills and expertise. These tasks include creating
new “clients” to support training, installing software patches, monitoring performance, among
others.