{"id":12467,"date":"2024-11-27T11:40:19","date_gmt":"2024-11-27T09:40:19","guid":{"rendered":"https:\/\/www.inprosec.com\/?p=12467"},"modified":"2025-07-04T10:25:58","modified_gmt":"2025-07-04T08:25:58","slug":"daikin-success-case","status":"publish","type":"post","link":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/","title":{"rendered":"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae"},"content":{"rendered":"

We present the details of the success story presented at both the annual AUSAPE 2024 event and the SAPinsider EMEA 2024<\/a>. The presentation \u201cAccess Governance (security and roles) in Cloud and SAP\u00aeGRC systems at DAIKIN\u00ae\u201d covered different topics related to the Access Area including both SAP\u00ae On Premise & Cloud systems.<\/span><\/p>\n\n

Daikin<\/em><\/a> is a Japanese air conditioning and aerothermal manufacturing company headquartered in Osaka. It has operations in Japan, China, Australia, India, Southeast Asia, Europe and North America. Organizationally it has more than 89,000 employees worldwide and specifically has more than 10,000 employees in Europe. The European unit has the IT part located in Belgium and Spain and supports more than 20 subsidiaries.<\/span><\/p>\n

The Challenge<\/b><\/h2>\n

Daikin <\/i><\/b>is organizing an overall concept of the IT department responsible for the authorization and access management part. This concept includes the governance of authorizations for two different types of SAP\u00ae systems: \u201cSAP On Premise\u201d & \u2018SAP Cloud & Non SAP Systems\u2019. In addition to this point would be the access control part by means of the SAP GRC Access Control system<\/span>.<\/i><\/b><\/p>\n

Inprosec Solution<\/b><\/h2>\n

The proposal on the one hand affected the Authorizations part by including a common concept that we will call \u201cAuthorization Concept\u201d that would be independent of the technology behind the SAP or non-SAP system. This document would contain the functional structure of the authorizations\/accesses of the system that is part of the Daikin system infrastructure that will not depend on the specific technology of this system.<\/span><\/p>\n

\"\"<\/p>\n

On the other hand, and in relation to the GRC Area, the system was updated to the new version in order to solve known problems that had been previously identified. In addition, small changes were proposed that would increase the efficiency of the procurement processes.<\/span><\/p>\n

Implementation<\/strong><\/h3>\n

Authorizations<\/span><\/h4>\n

A document called \u201cAuthorization Concept\u201d is designed. This document is structured in 4 different sections:<\/span><\/p>\n

    \n
  1. \n
      \n
    1. Introduction about the solution:<\/b> We will give visibility of what the tool does and what is the functional need of it for DAIKIN’s organization.<\/span><\/li>\n
    2. Solution Access Model:<\/b> Here we will detail which options the tool has for access restriction. This section is very different depending on the solution being implemented.<\/span><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n
        \n
      • Access Proposal for DAIKIN need:<\/b> Here we will detail what is going to be used from the point of view of access in Daikin. There are objects that may not be necessary because functionally the access restriction we need does not need it.<\/span><\/li>\n<\/ul>\n
          \n
        • Positions (Roles) that will use the solution:<\/b> We will detail all the positions that we will be using, the objective of each one of them, what they contain at access level, what restrictions exist and what conflicts may exist if we join several positions in the same user.<\/span><\/li>\n<\/ul>\n

          The following screenshot shows an example of the document:<\/b><\/p>\n

          \"\"<\/p>\n

          SAP\u00ae GRC<\/span><\/h4>\n

          It is important to understand that today Daikin’s SAP\u00ae GRC system supports very many different systems and therefore the proposed changes must be evaluated in great detail to avoid problems of continuity of access management processes. The image below gives visibility of the current complexity of this system:<\/span><\/p>\n

          \"\"<\/p>\n

          One of the most important changes that were identified throughout the project came from the generation of a new non-production GRC environment that would allow us to make tests more stable and closer to what would appear in the GRC Production environment:<\/span><\/p>\n

          \"\"<\/p>\n

          The change that had the greatest impact on the efficiency of the process within the GRC system was related to the simplification of the access provisioning process for those cases that do not generate segregation of duties risks. All the changes made during the project resulted in savings of 1.18 FTEs per year.<\/span><\/p>\n

          Results<\/b><\/h2>\n

          With the completion of this project, <\/span>Daikin<\/i><\/b> has a document that has a common structure regardless of the technology behind this system. This means a step forward in relation to Access Governance in SAP\u00ae and non-SAP\u00ae system.<\/span><\/p>\n

          On the other hand, in relation to the efficiency of the access processes, the processes of periodic review of annual access and annual risk review have been improved, correcting errors. Last but not least, <\/span>Daikin <\/i><\/b>has a new testing system that will allow testing more aligned with what is available in the production environment, being able to replicate scenarios that previously could not be performed.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

          We present the details of the success story presented at both the annual AUSAPE 2024 event and the SAPinsider EMEA 2024. The presentation \u201cAccess Governance (security and roles) in Cloud and SAP\u00aeGRC systems at DAIKIN\u00ae\u201d covered different topics related to the Access Area including both SAP\u00ae On Premise & Cloud systems. Daikin is a Japanese…<\/p>\n","protected":false},"author":6,"featured_media":13274,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"inline_featured_image":false,"footnotes":""},"categories":[60,53],"tags":[],"class_list":["post-12467","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-sap-grc-en","category-success-stories"],"acf":[],"yoast_head":"\nSuccess Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae - Inprosec<\/title>\n<meta name=\"description\" content=\"Discover how we optimized access and role management in SAP\u00ae and Cloud environments at Daikin, enhancing efficiency in critical processes and strengthening their access governance with innovative solutions.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.inprosec.com\/en\/daikin-success-case\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae\" \/>\n<meta property=\"og:description\" content=\"Discover how we optimized access and role management in SAP\u00ae and Cloud environments at Daikin, enhancing efficiency in critical processes and strengthening their access governance with innovative solutions.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.inprosec.com\/en\/daikin-success-case\/\" \/>\n<meta property=\"og:site_name\" content=\"Inprosec\" \/>\n<meta property=\"article:published_time\" content=\"2024-11-27T09:40:19+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2025-07-04T08:25:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.inprosec.com\/wp-content\/uploads\/2024\/11\/DAIKIN-EN.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1200\" \/>\n\t<meta property=\"og:image:height\" content=\"630\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Fernando Mosquera\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Fernando Mosquera\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/\"},\"author\":{\"name\":\"Fernando Mosquera\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/#\\\/schema\\\/person\\\/b05a40c0c3e81b819075dd95a10532e2\"},\"headline\":\"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae\",\"datePublished\":\"2024-11-27T09:40:19+00:00\",\"dateModified\":\"2025-07-04T08:25:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/\"},\"wordCount\":713,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.inprosec.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/DAIKIN-EN.jpg\",\"articleSection\":[\"SAP GRC\",\"Success stories\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/\",\"url\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/\",\"name\":\"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae - Inprosec\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.inprosec.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/DAIKIN-EN.jpg\",\"datePublished\":\"2024-11-27T09:40:19+00:00\",\"dateModified\":\"2025-07-04T08:25:58+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/#\\\/schema\\\/person\\\/b05a40c0c3e81b819075dd95a10532e2\"},\"description\":\"Discover how we optimized access and role management in SAP\u00ae and Cloud environments at Daikin, enhancing efficiency in critical processes and strengthening their access governance with innovative solutions.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.inprosec.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/DAIKIN-EN.jpg\",\"contentUrl\":\"https:\\\/\\\/www.inprosec.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/DAIKIN-EN.jpg\",\"width\":1200,\"height\":630},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/daikin-success-case\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/#website\",\"url\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/\",\"name\":\"Inprosec\",\"description\":\"Information security is our priority.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.inprosec.com\\\/en\\\/#\\\/schema\\\/person\\\/b05a40c0c3e81b819075dd95a10532e2\",\"name\":\"Fernando Mosquera\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/199e6c54b14f5b5ddf7e11a9bb0b455c3bed7a9a1a738b7be5c2572878e69d1a?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/199e6c54b14f5b5ddf7e11a9bb0b455c3bed7a9a1a738b7be5c2572878e69d1a?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/199e6c54b14f5b5ddf7e11a9bb0b455c3bed7a9a1a738b7be5c2572878e69d1a?s=96&d=mm&r=g\",\"caption\":\"Fernando Mosquera\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae - Inprosec","description":"Discover how we optimized access and role management in SAP\u00ae and Cloud environments at Daikin, enhancing efficiency in critical processes and strengthening their access governance with innovative solutions.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/","og_locale":"en_US","og_type":"article","og_title":"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae","og_description":"Discover how we optimized access and role management in SAP\u00ae and Cloud environments at Daikin, enhancing efficiency in critical processes and strengthening their access governance with innovative solutions.","og_url":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/","og_site_name":"Inprosec","article_published_time":"2024-11-27T09:40:19+00:00","article_modified_time":"2025-07-04T08:25:58+00:00","og_image":[{"width":1200,"height":630,"url":"https:\/\/www.inprosec.com\/wp-content\/uploads\/2024\/11\/DAIKIN-EN.jpg","type":"image\/jpeg"}],"author":"Fernando Mosquera","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Fernando Mosquera","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#article","isPartOf":{"@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/"},"author":{"name":"Fernando Mosquera","@id":"https:\/\/www.inprosec.com\/en\/#\/schema\/person\/b05a40c0c3e81b819075dd95a10532e2"},"headline":"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae","datePublished":"2024-11-27T09:40:19+00:00","dateModified":"2025-07-04T08:25:58+00:00","mainEntityOfPage":{"@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/"},"wordCount":713,"commentCount":0,"image":{"@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inprosec.com\/wp-content\/uploads\/2024\/11\/DAIKIN-EN.jpg","articleSection":["SAP GRC","Success stories"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.inprosec.com\/en\/daikin-success-case\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/","url":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/","name":"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae - Inprosec","isPartOf":{"@id":"https:\/\/www.inprosec.com\/en\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#primaryimage"},"image":{"@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#primaryimage"},"thumbnailUrl":"https:\/\/www.inprosec.com\/wp-content\/uploads\/2024\/11\/DAIKIN-EN.jpg","datePublished":"2024-11-27T09:40:19+00:00","dateModified":"2025-07-04T08:25:58+00:00","author":{"@id":"https:\/\/www.inprosec.com\/en\/#\/schema\/person\/b05a40c0c3e81b819075dd95a10532e2"},"description":"Discover how we optimized access and role management in SAP\u00ae and Cloud environments at Daikin, enhancing efficiency in critical processes and strengthening their access governance with innovative solutions.","breadcrumb":{"@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.inprosec.com\/en\/daikin-success-case\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#primaryimage","url":"https:\/\/www.inprosec.com\/wp-content\/uploads\/2024\/11\/DAIKIN-EN.jpg","contentUrl":"https:\/\/www.inprosec.com\/wp-content\/uploads\/2024\/11\/DAIKIN-EN.jpg","width":1200,"height":630},{"@type":"BreadcrumbList","@id":"https:\/\/www.inprosec.com\/en\/daikin-success-case\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.inprosec.com\/en\/"},{"@type":"ListItem","position":2,"name":"Success Story: Access Governance in Cloud and SAP\u00ae GRC systems at DAIKIN\u00ae"}]},{"@type":"WebSite","@id":"https:\/\/www.inprosec.com\/en\/#website","url":"https:\/\/www.inprosec.com\/en\/","name":"Inprosec","description":"Information security is our priority.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.inprosec.com\/en\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.inprosec.com\/en\/#\/schema\/person\/b05a40c0c3e81b819075dd95a10532e2","name":"Fernando Mosquera","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/199e6c54b14f5b5ddf7e11a9bb0b455c3bed7a9a1a738b7be5c2572878e69d1a?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/199e6c54b14f5b5ddf7e11a9bb0b455c3bed7a9a1a738b7be5c2572878e69d1a?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/199e6c54b14f5b5ddf7e11a9bb0b455c3bed7a9a1a738b7be5c2572878e69d1a?s=96&d=mm&r=g","caption":"Fernando Mosquera"}}]}},"_links":{"self":[{"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/posts\/12467","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/users\/6"}],"replies":[{"embeddable":true,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/comments?post=12467"}],"version-history":[{"count":9,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/posts\/12467\/revisions"}],"predecessor-version":[{"id":12871,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/posts\/12467\/revisions\/12871"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/media\/13274"}],"wp:attachment":[{"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/media?parent=12467"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/categories?post=12467"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.inprosec.com\/en\/wp-json\/wp\/v2\/tags?post=12467"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}