{"id":10385,"date":"2019-10-29T12:54:18","date_gmt":"2019-10-29T11:54:18","guid":{"rendered":"https:\/\/www.qintesi.com\/case-studies\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing\/"},"modified":"2023-05-31T11:07:23","modified_gmt":"2023-05-31T09:07:23","slug":"adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2","status":"publish","type":"portfolio","link":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/","title":{"rendered":"SAP solutions for GDPR compliance"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Challenge<\/h4>

To ensure the compliance of the SAP application system with the GDPR regulation (EU Regulation n\u00b0 2016\/679), with particular focus on the\u00a0protection of Customer\u2019s personal data, through the implementation of the complete suite of SAP solutions<\/b>\u00a0for the GDPR.<\/p>

\u00a0<\/h4>

Solution<\/h4>

The Qintesi team supported the Customer in the implementation of the solution in a complex project consisting of the following 4 streams:<\/p>

Stream 1: Implementation of\u00a0SAP GRC Access Control\u00a0<\/b>to:<\/p>

  • manage users and authorization roles in the various systems involved (ERP, BW, etc.), ensuring a \u201cpreventive\u201d monitoring of changes policies defined through an \u201calert\u201d message to the process owners in the event of creation\/modification;<\/li>
  • identify violations of segregation of duties matrix (SOD matrix) in \u201creal time\u201d.<\/li><\/ul>

    \u00a0<\/p>

    Stream 2: Implementation of\u00a0SAP UI Masking<\/b>\u00a0to mask data considered critical, regardless of:<\/p>

    • the access mode (display, reporting, direct access to tables, MS Excel downloads, etc.);<\/li>
    • the extent of the authorization profile (including users with \u201csuper user\u201d profiles, eg. \u201cSAP ALL\u201d).<\/li><\/ul>

      \u00a0<\/p>

      The ex-post verification through access to system logs, reporting an indication of \u201cwhich personal data have been accessed and by which users\u201d, has been ensured by the implementation of the\u00a0SAP UI Logging<\/b>\u00a0solution.<\/p>

      Stream 3: Implementation of\u00a0SAP Test Data Migration Server<\/b>\u00a0to:<\/p>

      • simplify copying and\/or migration of data from production systems to development\/test environments;<\/li>
      • reduce the size of the data processed (limiting the process to the \u201cportions\u201d of necessary data);<\/li>
      • avoid the propagation of personal data in the test environment through a procedure of \u201cscrambling\u201d of critical data.<\/li><\/ul>

        \u00a0<\/p>

        Stream 4: Implementation of\u00a0SAP Data Service<\/b>\u00a0to manage data quality and ETL processes in SAP and non-SAP environments.<\/p>

        The real-time analysis of \u201canomalous\u201d logs coming from SAP and non-SAP systems, and the correlation of anomalous events that occurred also on different systems in order to identify possible\u00a0data breach<\/b>, have been ensured through the adoption of the\u00a0SAP ETD<\/b>\u00a0(Enterprise Threat Detection) on the SAP HANA technology platform.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

        \n\t\t\t\t\t\t
        \n\t\t\t\t\t
        \n\t\t\t
        \n\t\t\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t

        Results\n<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
        \n\t\t\t\t
        \n\t\t\t\t\t\t\t
          \n\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t Adaptation of the security of SAP systems involved in the Risk & Compliance area to the GDPR regulations<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tComplete mapping of personal data on SAP systems<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
        • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tData access control and review of the \"provisioning\" process of roles and profiles<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t\t
          \n\t\t\t
          \n\t\t\t\t\t\t
          \n\t\t\t\t
          \n\t\t\t\t\t\t\t\t\t

          Le informazioni contenute in questo documento sono di propriet\u00e0.
          Copyright \u00a9 2014 Qintesi S.p.A. Tutti i diritti riservati.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

          Challenge To ensure the compliance of the SAP application system with the GDPR regulation (EU Regulation n\u00b0 2016\/679), with particular focus on the\u00a0protection of Customer\u2019s personal data, through the implementation of the complete suite of SAP solutions\u00a0for the GDPR. \u00a0 Solution The Qintesi team supported the Customer in the implementation of the solution in a […]<\/p>","protected":false},"author":3,"featured_media":20500,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_vp_format_video_url":"","_vp_image_focal_point":[],"footnotes":""},"portfolio_category":[],"portfolio_tag":[878],"servizi-offerti":[808,810],"moduli_implementati":[219,224,225,226,227,228],"settore":[1000],"class_list":["post-10385","portfolio","type-portfolio","status-publish","format-standard","has-post-thumbnail","hentry","portfolio_tag-security-en-2","servizi-offerti-digital-transformation","servizi-offerti-it-advisory","moduli_implementati-sap-grc-en","moduli_implementati-sap-data-service-en","moduli_implementati-sap-etd-en","moduli_implementati-sap-tdms-en","moduli_implementati-sap-ui-logging-en","moduli_implementati-sap-ui-masking-en","settore-industrial-machinery-components-metal-en"],"yoast_head":"\nSAP solutions for GDPR compliance - Qintesi<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"SAP solutions for GDPR compliance - Qintesi\" \/>\n<meta property=\"og:description\" content=\"Challenge To ensure the compliance of the SAP application system with the GDPR regulation (EU Regulation n\u00b0 2016\/679), with particular focus on the\u00a0protection of Customer\u2019s personal data, through the implementation of the complete suite of SAP solutions\u00a0for the GDPR. \u00a0 Solution The Qintesi team supported the Customer in the implementation of the solution in a […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/\" \/>\n<meta property=\"og:site_name\" content=\"Qintesi\" \/>\n<meta property=\"article:modified_time\" content=\"2023-05-31T09:07:23+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/GDPR_piccola.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"876\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/\",\"name\":\"SAP solutions for GDPR compliance - Qintesi\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/GDPR_piccola.png\",\"datePublished\":\"2019-10-29T11:54:18+00:00\",\"dateModified\":\"2023-05-31T09:07:23+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/GDPR_piccola.png\",\"contentUrl\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/GDPR_piccola.png\",\"width\":1920,\"height\":876},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.qintesi.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Portfolio Items\",\"item\":\"https:\\\/\\\/www.qintesi.com\\\/portfolio\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SAP solutions for GDPR compliance\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#website\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/\",\"name\":\"Qintesi\",\"description\":\"People shaping solutions.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.qintesi.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#organization\",\"name\":\"Qintesi\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/qintesi_logo.png\",\"contentUrl\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/qintesi_logo.png\",\"width\":908,\"height\":681,\"caption\":\"Qintesi\"},\"image\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"SAP solutions for GDPR compliance - Qintesi","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/","og_locale":"en_US","og_type":"article","og_title":"SAP solutions for GDPR compliance - Qintesi","og_description":"Challenge To ensure the compliance of the SAP application system with the GDPR regulation (EU Regulation n\u00b0 2016\/679), with particular focus on the\u00a0protection of Customer\u2019s personal data, through the implementation of the complete suite of SAP solutions\u00a0for the GDPR. \u00a0 Solution The Qintesi team supported the Customer in the implementation of the solution in a […]","og_url":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/","og_site_name":"Qintesi","article_modified_time":"2023-05-31T09:07:23+00:00","og_image":[{"width":1920,"height":876,"url":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/GDPR_piccola.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/","url":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/","name":"SAP solutions for GDPR compliance - Qintesi","isPartOf":{"@id":"https:\/\/www.qintesi.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/#primaryimage"},"image":{"@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/#primaryimage"},"thumbnailUrl":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/GDPR_piccola.png","datePublished":"2019-10-29T11:54:18+00:00","dateModified":"2023-05-31T09:07:23+00:00","breadcrumb":{"@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/#primaryimage","url":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/GDPR_piccola.png","contentUrl":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/GDPR_piccola.png","width":1920,"height":876},{"@type":"BreadcrumbList","@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-process-industries-manufacturing-2\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.qintesi.com\/"},{"@type":"ListItem","position":2,"name":"Portfolio Items","item":"https:\/\/www.qintesi.com\/portfolio\/"},{"@type":"ListItem","position":3,"name":"SAP solutions for GDPR compliance"}]},{"@type":"WebSite","@id":"https:\/\/www.qintesi.com\/#website","url":"https:\/\/www.qintesi.com\/","name":"Qintesi","description":"People shaping solutions.","publisher":{"@id":"https:\/\/www.qintesi.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.qintesi.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.qintesi.com\/#organization","name":"Qintesi","url":"https:\/\/www.qintesi.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.qintesi.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2022\/03\/qintesi_logo.png","contentUrl":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2022\/03\/qintesi_logo.png","width":908,"height":681,"caption":"Qintesi"},"image":{"@id":"https:\/\/www.qintesi.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio\/10385","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio"}],"about":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/types\/portfolio"}],"author":[{"embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/comments?post=10385"}],"version-history":[{"count":0,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio\/10385\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/media\/20500"}],"wp:attachment":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/media?parent=10385"}],"wp:term":[{"taxonomy":"portfolio_category","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio_category?post=10385"},{"taxonomy":"portfolio_tag","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio_tag?post=10385"},{"taxonomy":"servizi-offerti","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/servizi-offerti?post=10385"},{"taxonomy":"moduli_implementati","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/moduli_implementati?post=10385"},{"taxonomy":"settore","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/settore?post=10385"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}