Falk Hennig

Responsible for the security concept in all major IT business systems, primarily SAP ERP: access controls (including SoD, sensitive access limitation, compensating controls) and process controls // Owner of the GRC Tool Approva One // Global management of the security concept roll-outs in IT Projects from a business perspective // Integration of SAP supported access and process controls into the global internal control system // Support of Internal Audit in selected business, system and project reviews

Management of a worldwide SAP Application Security Team and Concept for Governance, Risk and Compliance (3.400 users, 33 SAP environments - ECC, R/3, SCM, APO, BW, BI), in particular Standardization of SAP User Management, Segregation of Duties (SOD), restrictive Access Rights, Compensating Controls and Application Security Settings /// Mapping business processes to effective internal control management within a proper framework of SOX (SAP application security) /// SAP Security Projects

Conducting worldwide Operational Audits, Business Process Audits, Internal Control Reviews, SAP Audits, IT Audits, SOX 404 Reviews /// Lead Auditor for all SAP Audits globally; risk-based Review of complex SAP Projects in different Stages (SAP Access Rights, SOD, Application Security, Internal Controls in SAP based Business Processes, Parameter Settings, Change Management, Interface Controls, DRP) /// Planning of Audits and agreeing on Audit Objectives, Scope of Work and Results with Management

Information Security - Technology, Management & Law Master Thesis: Implementation of a cost-efficient internal control framework into the SAP supported "Procurement-to-Pay" process (based on SAP GRC 10.0)

Information Security - Technology, Management & Law

Accounting / Auditing, Taxes, Controlling /// Final thesis: Taxation in the case of insolvency – an inquiry of a limited company in consideration of the new insolvency law