Professional Documents
Culture Documents
Essar Oil PDF
Essar Oil PDF
Picture Credit | Essar Oil Limited, Mumbai, India Used with permission.
Quit
2 SAP Business Transformation Study | Oil and Gas | Essar Oil
Executive overview
Company BUSINESS TRANSFORMATION TOP BENEFITS ACHIEVED
Essar Oil Limited
50%
The companys top objectives:
Headquarters Improve visibility of user-access risk violations and provide real-time access
Mumbai, India for management and audit teams
Achieve compliance for segregation of duties governance Fewer risk violations
Industry per user
Oil and gas The resolution:
95%
Implemented the SAP BusinessObjects Access Control application within
Products and Services the companys legacy SAP ERP application
Exploration, production, and Assigned a project team to work with PwC Consulting Services
marketing of petroleum-based Customized the standard risks and rules set with specific roles, risks, rules, Reduction in risk
products approvals, and workflow processes violations per role
Employees The key benefits:
1,300
Revenue
Real-time assessment capabilities to control user-access permissions and
the segregation of duties
All business managers empowered to block potential access violations
30%
Improvement in
Approximately INR 472.5 billion Automation of the hire-to-retire user lifecycle management process
(US$10.3 billion)
processing user requests
Implementation Partner SAP BusinessObjects Access Control gives us real-time assessment and
PricewaterhouseCoopers
International Limited (PwC) governance capabilities, empowering business managers to map key
fraud risks while substantially lowering risk violations.
Raahil Burhaani, CIO, Essar Oil Limited
Executive overview
Improve control of user-access
Company objectives permissions
Resolution India-based Essar Oil Limited is a leading integrated Previously, employees were using manual processes
oil and gas company with end-to-end operations. such as e-mail and telephone calls to assign user
Offering a portfolio of onshore and offshore oil permissions, so it was difficult to tightly control SoD
Business transformation and gas blocks in Asia, Africa, and Australia, Essar and keep track of all user-access authorizations. Yet
Oil is also a leader in the exploration of coal bed effective segregation of duties and access control
methane gas. Its refinery at Vadinar in Gujarat over key information is a prerequisite for sound
Future plans currently produces 300,000 barrels of oil per day. corporate governance. To achieve this, Essar Oil
The company is also a leading oil retailer in India, staff would engage with risk advisory firms to assess
building a network of 2,500 filling stations across various users risk profiles and identify violations.
the country. Employees then manually resolved the issues that
were raised as a result of these audits.
Like all listed companies, Essar Oil must comply
with numerous corporate governance regulations. Key stakeholders at Essar Oil realized that this
But with no real-time internal governance controls approach was time consuming, labor intensive,
in place to handle user-access permissions and expensive and not foolproof. They concluded
manage the segregation of duties (SoD), the that the company needed a tool to automatically
company was facing compliance risks. analyze conflicts and manage user provisioning and
authorizations, one that could provide real-time
assessment capabilities to map key fraud risks.
Executive overview
SAP software fuels best practices for
Company objectives user-access controls
Resolution With SAP software forming the backbone of Essar To automate the entire hire-to-retire user lifecycle
Oils streamlined internal systems, the company management process, the team adopted new
knew where to turn to improve its governance, risk, rules. These ensure that individual users within the
Business transformation and compliance. The SAP BusinessObjects Access business can receive only the access rights they
Control application was the ideal solution to reduce require for their daily work.
access risk across its enterprise and achieve real-
Future plans time visibility into access risk. Implementation team members also conducted
classroom and on-the-job training to establish the
First, a synergistic cross-functional team was put new user-access provisioning process. They also
in place to drive the project. The team members prepared comprehensive documentation to meet
included IT staff, business process owners, as ongoing compliance requirements as a part of the
well as internal auditors who were supported by implementation process.
implementation partner PricewaterhouseCoopers
International Limited.
Executive overview
Collaborative, continuous control of SoD
Company objectives
Having automated its access management, Essar empowered to block potential access violations and
Resolution Oil has real-time assessment capabilities for SoD map key fraud risks. And should a violation occur,
compliance. The implementation team modified the solution automatically mitigates controls and
the process for accessing the legacy SAP software alerts business managers.
Business transformation system with a new workflow that streamlines
approvals a great help to all appropriate Automated user provisioning has replaced phone
managers. The softwares real-time connection to calls, e-mail exchanges, and manual user-access
Future plans the core SAP system continuously monitors access request forms. Integrating compliance measures
risks and user assignments across the enterprise. into this process has significantly reduced the time
it takes to process user-access instructions and to
By simulating intended user-role changes, manage password reset requests.
nontechnical business managers are now
KEY BENEFITS
50% 30%
Fewer risk violations Improvement in
per user processing user requests
95% 95%
Reduction in risk Faster response to
violations per role password reset requests
Executive overview
Unifying access
Company objectives controls to vertical
Resolution
operations
Business transformation Essar Oil is planning to extend the SAP
BusinessObjects Access Control application
rollout to its vertical business operations in steel,
Future plans engineering projects, and power. Investing in a
uniform integrated platform will enable Essar Oils
business managers to become more responsible for
risk management and the overall security process.
With real-time access, the company will eliminate
conflicts more readily and manage user provisioning
more effectively to meet its compliance obligations
and manage key fraud risks.
Picture Credit | Essar Oil Limited, Mumbai, India Used with permission.
CMP16022 (11/10)