CONCLUSION

CONCLUSION

After implementing SK ERP, ensuring security is a vital issue. The organization have already implemented SAP security, need to ensure that the system runs smoothly and doesn’t get breached. There has to be a Central User Administration (CUA) system in place for constant monitoring. So need in-depth knowledge about administration, authorization concepts, Web Application Servers, and SAP system architecture. If  need deeper knowledge on SAP security architecture, SAP security entities, then SAP Administration will be the guiding course for Organization. These courses will guide the organization how to handle the security issues relating to the operating system and the database in an SAP implementation.

The SAP ERP system, the GRC (Governance, Risk, and Compliance) tools from SAP offers a complete suite of tools to control and manage risk. SAP GRC Access Control delivers a comprehensive access control facilities and helps companies to define and monitor Segregation of Duties (SOD), profile management, and compliance. In SAP’s risk detection module, SAP’s applications for Access Control detect access and authorization risks across SAP applications. Access control also prevents new risks from entering the system.

Security Threats and Solutions

Security Threats and Solutions

SAP security cannot be an afterthought for SAP product implementations. The security considerations and security planning should be done at the initial design stage. There are three underlying aspects to all security infrastructure layers – data integrity, user access, and user authorization. It is important for the company implementing SAP products to determine which users can log in securely, how should the log in process be, what are the data the user can view, what the user can do with the data after access is granted, how are the data secured and protected, and how will the data exchange occur back into SAP.

6.1  Type of security threats faced by the system.

6.1.1       Operating system fault.

The term page fault is a bit misleading as it implies that something went seriously wrong. Although page faults are undesirable – as they result in slow accesses to the hard disk – they are quite common in any operating system that uses virtual memory.

If the SK ERP Support team is cannot handle the SAP team come to help to solve the problem.

6.2  Suggestions to handle this situation

6.2.1       Since this system new in implementation. In short this period The SK ERP team learn all the problems come started until the in implementation progress.

6.2.2       Provide the tools protection.

To monitor the SK ERP also currently provide the scan virus also protect all the user with the MCAFree.

SAP NetWeaver Technology has envolved to include SAP security components and infrastructure. In each of SAP’s NetWeaver scenarios, lies a security layer. SAP describes these as usage types, which determine the intended purpose of a system or sub-system. These are available after installing and configuring the different components of SAP.

6.2.3    Using Secure Network Connection: Secure Network Connection (SNC) integrates an external security product with the SAP system to provide additional security functions not directly available with SAP systems. SNC verifies identity and provides authentication, provides data integrity protection, and privacy protection.

6.2.4    Using User ID and Password: User ID and password are the default authentication mechanism supported by all SAP NetWeaver products. The password set by the administrator must meet the SAP predefined and customer defined password rules and security profile parameter settings

Most common Problems of ERP Implementation

Most common Problems of ERP Implementation

Focusing on Technology there is no evidence anywhere in the history of IT that software alone will solve a business problem. Once when the system crashes cause of abandoned work and take time to go back to .Ignoring the importance of requirement definition many companies try to adopt ERP system which doesn’t fit to business requirement which generally lead to project failure. Jumping from the Requirement definition to the development phase .Most of projects have to deliver the system in the timeline, thus they may skip some important implementation steps. For example, Project manager may skip the change manage process which may create users’ resistance to new system and lead to project failure.

Competitive Advantage of having the system.

Competitive Advantage of having the system.

Having this system enhance productivity, flexibility and customer responsiveness this is because the system is a well-known system and used by the SK group when bidding with others companies to compete to have the project. By integrated core business processes together in one single application, it helps Company maximize the efficiency of business process across the entire Organization. Increase on time delivery, Increase productivity & completion project on time, Increase ability to forecast demand to supplies, Increase order capacity, and improve customer service (Customer Relationship Management (CRM).Eliminate costs and inefficiencies using an ERP system to standardize business processes can dramatically improve Company’s operation. ERP enable company to manage relationship with vendor results in lower cost for purchased items. Better resource management results in more inventory turns and decrease the level of inefficiencies &waste of material. Data consistency also

Because an ERP system integrates all business management functions, it decreases level of       inconsistency information from different systems. Thus, by using ERP system, managers can gather correct information and make a right decision. By integrating all business functions together in one system, it increases ability of a company to use internet as part of the business strategy. Web-enabled technology allows the super users to access information, sell product, run business processes, and communicate with customers and partners at any time and from anywhere in the world. 

System Topology Diagram

  A system Topology diagram.

In the SK ERP,this system is using the Mesh topology.Refer the figure  A mesh network topology is a decentralized design in which each node on the network connects to at least two other nodes. Mesh networks are expected to play an important part in the Internet of Things (IoT).

Unlike nodes in a star topology, which require a router to deliver Internet service, network nodes can "talk" directly to each other without requiring the assistance of an Internet connection. A big advantage of this decentralized topology is that there cannot be a single point of failure (SPoF). If one node can no longer operate, all the rest can still communicate with each other, directly or through one or more intermediate nodes.

Mesh networks can use a full mesh topology or a partial mesh topology. In a full mesh topology, each network node is connected to all the other nodes in the network. In a partial mesh topology, at least one node connects directly to every other node while others may only connect to those nodes they exchange data with on a frequent basis.

                                                             Figure  Mesh Topology

a single point of failure (SPoF). If one node can no longer operate, all the rest can still communicate with each other, directly or through one or more intermediate nodes.

Mesh networks can use a full mesh topology or a partial mesh topology. In a full mesh topology, each network node is connected to all the other nodes in the network. In a partial mesh topology, at least one node connects directly to every other node while others may only connect to those nodes they exchange data with on a frequent basis.

Figure  Mesh Topology

Figure Sapurakencana Petroleum(SKPB) Enterprise Resources Planning System(ERP) Topology.

Refer the figure Sapurakencana Petroleum(SKPB) using the Internet Protocol Virtual Private Network (IP VPN) to allowed the user to connect the Enterprise Resources Planning System(ERP).This network the Sapurakencana Petroleum(SKPB) rental with TM Malaysia.Sapurakencana is the big company with many subsidiaries.Now the using the Internet Protocol Virtual Private Network (IP VPN), the workers can access the network and do the work  anywhere during this network.

The Team in SAP-ERP Project

These information system will be supported by the technical support from the Project Team (Internal staff), the supporting team (internal staff) & the SAP staff if there is a major and serious problem occur .The process flow are usually the user will email directly to the SK (SapuraKencana)IT support to report the incident .Then the it support will received the email and revert the email by raise the ticket no. Each case will be entertained by given the ticket & support engineer that had been assigned will investigate and solve the problems. Once completed the notification by an email will be given that show they managed to fix the problem.                                                                 

Company Background

Company Background.

SapuraKencana Petroleum Berhad (SKPB) is a full-fledged upstream player and one of the world’s largest integrated oil and gas services and solutions providers. SapuraKencana’s full spectrum of capabilities covers the entire value chain of exploration, development, production, rejuvenation, and decommissioning and abandonment. With a multinational workforce comprising 51 nationalities and over 13,000 people, comprehensive world-class assets and project management capabilities, the Group’s global presence can be seen in over 20 countries including Malaysia, China, Australia, Brazil, the United States of America, as well as those in Western Africa, and the Middle East.

The Team for  Enterprise Planning System in SapuraKencana Petroleum Berhad (SKPB).

SKPB started on this journey to implement a group-wide SAP ERP platform in March 2014.The team called “The SK ERP Project Team”. Located in level 5 SapuraKencana The Mines Office this team is the leader for this Team is Dr.Poh.One of the  key benefits of this ERP implementation is to have one standard integrated plaform to enable us to leverage on the right information from various business entities and departments within SK.This team also partner with Pwc Malaysia to ensure that SK reap the full benefits through improvements in controls, accuracy, transparency, timeliness and efficiency.

.

                                          Figure 1.1 The Organizational Structure