How secure is your SAP authorization concept?

In a German company, wages were paid over several years to an employee who never existed. Read more...
3 March 2020
SAP Authorization
SAP Compliance
LinkedIn logo icon in blue and white.

This blog article is going to help you further…

… The man who never lived!

In a German company, wages were paid over several years to an employee who never existed. The case, whose cause can be found in missing SoD rules, became known as “The Man Who Never Lived”.

… and suddenly 50 million Euros are gone!

December 23, 2015 will go down as a black day in the company history of an Austrian aircraft supplier. On this day, an employee from the financial accounting department transferred the first 13 million euros to Internet fraudsters. They had set up a fake e-mail address of the CEO and pretended to the employee that this was a strictly confidential transaction for a company purchase. The correspondence comprises around 40 mails to build trust and follows the classic pattern of a so-called “Fake President Fraud or CEO Fraud”. The damage to the listed company is enormous. By the time the more than ten debits were noticed on 19 January 2016, a total of 50 million euros had been lost. The money has flowed to China, Taiwan and Slovakia.

Source: https://www.nachrichten.at/wirtschaft/wirtschaftsraumooe/Wie-der-FACC-50-Millionen-abhanden-kamen;art467,2109585

No items found.
No items found.
WHITE PAPER – enhance your knowledge!

SAP Access & Authorizations

Learn how to manage your SAP GRC Authorizations

Download White Paper
Tablet thumbnail of SAP Licensing Guide by VOQUZ Labs

… Can this happen to you?

Are you sure that you are protected against it?

Which employees have extended authorizations, can you exclude fraudulent actions? That means are they technically excluded?

Do you have an overview of your critical actions and SOD conflicts?

… VOQUZ Labs has the solution, because the next audit is coming!

We analyze your SAP system for weaknesses, risks and violations of the law.

Further we check for separation of functions risks (SOD conflicts) and for critical individual SAP authorizations from a catalog of 350 critical combinations and 150 critical activities and 50 general system checks.

If violations are detected, we will also show you the optimal solutions.

…you still have questions?

Contact us about our SAP Compliance Check and have your system tested by VOQUZ Labs so that you are spared the scenarios mentioned above.

About the Author

Author profile picture
Peter Rattey
Founder, VOQUZ Labs
Peter Rattey is the founder of VOQUZ Labs. He invented samQ and is still intensively involved in samQ's further development. Peter is one of our most experienced advisors.

We are here for you!

No matter where you are in the world

It's all about good communication. Whether you want to learn more about cost-effective, compliant, clever SAP Add-ons, have a technical question, are interested in a demo (POC), or want to explore a  partnership — we’re here for you. Our global team is ready to support  you in different languages and cultures.
Contact us