{"id":10397,"date":"2019-10-29T17:56:13","date_gmt":"2019-10-29T16:56:13","guid":{"rendered":"https:\/\/www.qintesi.com\/case-studies\/adeguamento-dei-sistemi-alla-normativa-gdpr-nel-settore-engineering-construction\/"},"modified":"2022-05-04T18:08:10","modified_gmt":"2022-05-04T16:08:10","slug":"adaptation-of-systems-to-the-gdpr-regulation","status":"publish","type":"portfolio","link":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/","title":{"rendered":"Adaptation of systems to the GDPR regulation"},"content":{"rendered":"
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Challenge<\/h4>

In compliance with GDPR regulation (EU regulation n\u00b0 2016\/679), the\u00a0goal of the project was to ensure the security of the SAP application system<\/strong>, with particular focus on the customer\u2019s personal data.<\/p>

A\u00a0set of SAP GRC solutions were therefore implemented to manage the various aspects of raising awareness of personal data<\/strong>\u00a0that determine the achievement of an adequate level of security, bridging any gaps compared to those actually applied.<\/p>

\u00a0<\/h4>

Solution<\/h4>

For the project implementation, a\u00a0Security Risk Assessment<\/strong>\u00a0analysis was carried out to detect any security criticalities and formulate a tailor-made remediation plan based on the specificities of the Customer.<\/p>

Then, the\u00a0personal data<\/strong>\u00a0present in the SAP systems were collected and the transactions that allow access were mapped.<\/p>

The authorization criticalities that were identified in the Security Risk Assessment were managed through:<\/p>

  • The\u00a0reclamation\u00a0<\/b>of roles<\/li>
  • The\u00a0SAP Read Access Logging (SAP RAL)\u00a0<\/b>implementation to track access to all personal data, saving a log file<\/li>
  • The\u00a0SAP Enterprise Threat Detection (SAP ETD)<\/b>\u00a0implementation to receive and analyze the logs from SAP systems using the potential of SAP HANA to identify a possible Data Breach in real time by connecting events that occurred on different systems<\/li><\/ul>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t\t
    \n\t\t\t
    \n\t\t\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t

    Results\n<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
    \n\t\t\t\t
    \n\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t The security of SAP systems has been adapted to comply with the GDPR regulations<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tThe personal data has been mapped on SAP systems<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tThe access to personal data has been tracked<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t
    • \n\t\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t<\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\tThe gaps related to the criticalities present in the system have been filled<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
      \n\t\t\t\t\t\t
      \n\t\t\t\t\t
      \n\t\t\t
      \n\t\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t

      Statement<\/h4>\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t
      The project allowed the customer to achieve compliance with the GDPR, consistently with the company objectives, in a short time.<\/div>\n\t\t\t\n\t\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\"\"\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t\t\t\t\t\t
      Luigi Granitto<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
      Client Account Senior Manager - Qintesi<\/div>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t
      \n\t\t\t\t\t\t
      \n\t\t\t\t\t
      \n\t\t\t
      \n\t\t\t\t\t\t
      \n\t\t\t\t
      \n\t\t\t\t\t\t\t\t\t

      Le informazioni contenute in questo documento sono di propriet\u00e0.
      Copyright \u00a9 2014 Qintesi S.p.A. Tutti i diritti riservati.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>","protected":false},"excerpt":{"rendered":"

      Challenge In compliance with GDPR regulation (EU regulation n\u00b0 2016\/679), the\u00a0goal of the project was to ensure the security of the SAP application system, with particular focus on the customer\u2019s personal data. A\u00a0set of SAP GRC solutions were therefore implemented to manage the various aspects of raising awareness of personal data\u00a0that determine the achievement of […]<\/p>","protected":false},"author":3,"featured_media":20458,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","format":"standard","meta":{"_vp_format_video_url":"","_vp_image_focal_point":[],"footnotes":""},"portfolio_category":[],"portfolio_tag":[],"servizi-offerti":[808,809,810],"moduli_implementati":[],"settore":[827,828],"class_list":["post-10397","portfolio","type-portfolio","status-publish","format-standard","has-post-thumbnail","hentry","servizi-offerti-digital-transformation","servizi-offerti-vertical-solutions","servizi-offerti-it-advisory","settore-financial-services-en","settore-engineering-construction-industrial-components-en"],"yoast_head":"\nAdaptation of systems to the GDPR regulation - Qintesi<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Adaptation of systems to the GDPR regulation - Qintesi\" \/>\n<meta property=\"og:description\" content=\"Challenge In compliance with GDPR regulation (EU regulation n\u00b0 2016\/679), the\u00a0goal of the project was to ensure the security of the SAP application system, with particular focus on the customer\u2019s personal data. A\u00a0set of SAP GRC solutions were therefore implemented to manage the various aspects of raising awareness of personal data\u00a0that determine the achievement of […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/\" \/>\n<meta property=\"og:site_name\" content=\"Qintesi\" \/>\n<meta property=\"article:modified_time\" content=\"2022-05-04T16:08:10+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/Immagine_piccola-1.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1920\" \/>\n\t<meta property=\"og:image:height\" content=\"876\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/\",\"name\":\"Adaptation of systems to the GDPR regulation - Qintesi\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/Immagine_piccola-1.png\",\"datePublished\":\"2019-10-29T16:56:13+00:00\",\"dateModified\":\"2022-05-04T16:08:10+00:00\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/Immagine_piccola-1.png\",\"contentUrl\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2019\\\/10\\\/Immagine_piccola-1.png\",\"width\":1920,\"height\":876},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/en\\\/portfolio\\\/adaptation-of-systems-to-the-gdpr-regulation\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.qintesi.com\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Portfolio Items\",\"item\":\"https:\\\/\\\/www.qintesi.com\\\/portfolio\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Adaptation of systems to the GDPR regulation\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#website\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/\",\"name\":\"Qintesi\",\"description\":\"People shaping solutions.\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.qintesi.com\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#organization\",\"name\":\"Qintesi\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/qintesi_logo.png\",\"contentUrl\":\"https:\\\/\\\/www.qintesi.com\\\/wp-content\\\/uploads\\\/2022\\\/03\\\/qintesi_logo.png\",\"width\":908,\"height\":681,\"caption\":\"Qintesi\"},\"image\":{\"@id\":\"https:\\\/\\\/www.qintesi.com\\\/#\\\/schema\\\/logo\\\/image\\\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Adaptation of systems to the GDPR regulation - Qintesi","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/","og_locale":"en_US","og_type":"article","og_title":"Adaptation of systems to the GDPR regulation - Qintesi","og_description":"Challenge In compliance with GDPR regulation (EU regulation n\u00b0 2016\/679), the\u00a0goal of the project was to ensure the security of the SAP application system, with particular focus on the customer\u2019s personal data. A\u00a0set of SAP GRC solutions were therefore implemented to manage the various aspects of raising awareness of personal data\u00a0that determine the achievement of […]","og_url":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/","og_site_name":"Qintesi","article_modified_time":"2022-05-04T16:08:10+00:00","og_image":[{"width":1920,"height":876,"url":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/Immagine_piccola-1.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/","url":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/","name":"Adaptation of systems to the GDPR regulation - Qintesi","isPartOf":{"@id":"https:\/\/www.qintesi.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/#primaryimage"},"image":{"@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/#primaryimage"},"thumbnailUrl":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/Immagine_piccola-1.png","datePublished":"2019-10-29T16:56:13+00:00","dateModified":"2022-05-04T16:08:10+00:00","breadcrumb":{"@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/#primaryimage","url":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/Immagine_piccola-1.png","contentUrl":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2019\/10\/Immagine_piccola-1.png","width":1920,"height":876},{"@type":"BreadcrumbList","@id":"https:\/\/www.qintesi.com\/en\/portfolio\/adaptation-of-systems-to-the-gdpr-regulation\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.qintesi.com\/"},{"@type":"ListItem","position":2,"name":"Portfolio Items","item":"https:\/\/www.qintesi.com\/portfolio\/"},{"@type":"ListItem","position":3,"name":"Adaptation of systems to the GDPR regulation"}]},{"@type":"WebSite","@id":"https:\/\/www.qintesi.com\/#website","url":"https:\/\/www.qintesi.com\/","name":"Qintesi","description":"People shaping solutions.","publisher":{"@id":"https:\/\/www.qintesi.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.qintesi.com\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.qintesi.com\/#organization","name":"Qintesi","url":"https:\/\/www.qintesi.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.qintesi.com\/#\/schema\/logo\/image\/","url":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2022\/03\/qintesi_logo.png","contentUrl":"https:\/\/www.qintesi.com\/wp-content\/uploads\/2022\/03\/qintesi_logo.png","width":908,"height":681,"caption":"Qintesi"},"image":{"@id":"https:\/\/www.qintesi.com\/#\/schema\/logo\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio\/10397","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio"}],"about":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/types\/portfolio"}],"author":[{"embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/comments?post=10397"}],"version-history":[{"count":0,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio\/10397\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/media\/20458"}],"wp:attachment":[{"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/media?parent=10397"}],"wp:term":[{"taxonomy":"portfolio_category","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio_category?post=10397"},{"taxonomy":"portfolio_tag","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/portfolio_tag?post=10397"},{"taxonomy":"servizi-offerti","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/servizi-offerti?post=10397"},{"taxonomy":"moduli_implementati","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/moduli_implementati?post=10397"},{"taxonomy":"settore","embeddable":true,"href":"https:\/\/www.qintesi.com\/en\/wp-json\/wp\/v2\/settore?post=10397"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}