25
The use of SAP Information Lifecycle Management (ILM) for GDPR compliance Stian Windsland, SBN Webinar, 07-June-2018

The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

  • Upload
    others

  • View
    115

  • Download
    18

Embed Size (px)

Citation preview

Page 1: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

The use of SAP Information Lifecycle Management (ILM) for GDPR compliance

Stian Windsland, SBN Webinar, 07-June-2018

Page 2: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

2SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

What is SAP ILM?

Features

Prerequisites

Nessesary steps

Initial analysis

Setup ILM rules/Policies

Issues and considerations

Demonstration

Content

Page 3: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

What is SAP ILM?

Page 4: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

4SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

SAP Information Lifecycle Management (ILM) enables you to manage data volumes and compliance with legal and regulatory mandates at the same time. It also helps you apply retention times and destroy data after the expiration date is reached.

SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability to manage the lifecycle of live and archived data based on rules. SAP NetWeaver ILM uses the ILM-specific, enhanced functions of data archiving.

SAP ILM can help streamline your IT infrastructure by decommissioning legacy systems and automating data retention according to rules you define, minimizing risk with control over your data:• Archive obsolete data to enhance performance and

reduce database size and administration costs• Support data retention rules by creating separate

archives based on varying data lifetimes• Reduce IT management costs by consolidating systems

and decommissioning legacy systems• Preserve compliance auditing and reporting capabilities

for decommissioned systems• Reduce the cost and risk of legal discovery by automating

data collection for legal cases

Definition What can it do?

SAP ILM (Information Lifecycle Management)

Page 5: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

Features

Page 6: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

6SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Destruction of Data

• HR Master Data• Payroll Data• Vendor/Suplier Master Data• Purchase to Pay Data• Order to Cash Data

Blocking/Archiving Legal Hold

SAP ILMFeatures

You can archive documents, and limit access to this data.• Authorization objects:

• S_IRM_BLOC• S_IRM_BL_M

You can put legal hold in two ways:Directly in infotype 3246Trough SAP Case Management system.

Page 7: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

7SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Page 8: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

8SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Page 9: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

Prerequisites

Page 10: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

10© 2018 Capgemini. All rights reserved.

Enhancement PackMinimum Enhancement pack 6.0

Page 11: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

Nessesary Steps

Page 12: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

12SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Nessesary Steps

Copy/Adapt/create SAP roles – Transaction: PFCG

Activate SAP Business Functions – Transaction: SFW5

Activate Services – Transaction: SICF

Page 13: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

13SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Transaction: PFCG

SAP Delived Roles

Main menu role:SAP_BC_ILM_ADMIN_RM - ILM Retention Management - Administration Cockpit

Authorization roles:SAP_BC_CCM_DATA_ARCHIVING - Data Archiving AdministratorSAP_BC_ILM_ARCHIVELINK - Edit References to ArchiveLink DocumentsSAP_BC_ILM_AUDIT_AREA - Processing Audit AreasSAP_BC_ILM_DESTROY - Destroy Data in ILM StoreSAP_BC_ILM_IRM - ILM-Objekte und -Regeln bearbeitenSAP_BC_ILM_LHM_ADMIN - Edit Legals Holds on DataSAP_BC_ILM_LHM_EXPERT - Display Legal Holds on DataSAP_BC_ILM_SB - Use ILM Store BrowserSAP_BC_ILM_SRS_REQUESTS - Call Storage and Retention Service (SRS)

Page 14: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

14SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

SAP Enterprise Business FunctionsTransaction: SFW5

ILM - Information Lifecycle Management

And others (ILM_STOR, TAX, etc.)

BUPA_ILM_BF - ILM-Based Deletion of Business Partner Data

ERP_CVP_ILM_1 - ILM-Based Deletion of Customer and Vendor Master Data

ILM_BLOCKING - ILM Blocking Functionality

SAP Business Functions

Page 15: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

15SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Transaction: SICF

ILM_AUDIT_AREA

ILM_CHECKSUM

ILM_AUDIT_TEMPLATE

IWP_WD_WP_CREATE

IRM_POLICIES

SAP Services - Examples

And more (Depending on requirements)

Page 16: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

Initial analysis

Page 17: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

17SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Initial analysis

SAP Approach: AnalysisàApplication of NotesàActivation of ILMàBuild & Test Deletion ObjectsàBuild & Test Blocking Objects

Customer Approach 1: Activate ILMàPrototypeàTestàVerify (Learn)

Customer Approach 2: List all PA/HRP tables with dataàList all ILM archiving objects and what tables they delete fromàUse Excel to create a to-do list based on above.

Page 18: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

Setup ILM rules/Policies

Page 19: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

19SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Create Audit Areas

• Base on requirements:• Reporting• Access

• Assign ILM objects to Audit Areas, and remove from other (An ILM object can only be in one Audit Area)

Create Retention Rules Create Policies

Transactions: IRMPOL & ILMARASetup ILM rules/Policies

• Create one rule pr ILM object

• Choose a suitable name• Max 4 condition fields• Add comments to rules• Make sure they are live• Make sure they are in «audit

area»

You can create many rules pr policy.Fill inn Condition FieldsFill inn Retention timesChose time referencesSet priority

Page 20: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

20SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Archiving/destruction

• Create the variants and run the programs in transaction SARA.• Preprocessing• Write• Delete

Create Process Model HR Process Workbench

Transactions: SARA, PEST and PUSTSetup ILM rules/Policies

• Create variants• Use template in transaction

PEST, to create process model

• Example process model delivered in SAP Support Package

• Schedule your process models to run here.

Page 21: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

21SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Page 22: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

Issues and Considerations

Page 23: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

23SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Masterdata problems

• Infotype 0003 – Dates not logical

• Infotype 0005 – Previous archiving attempts creates problems

Customer Spesific Lacking ILM coverage

Do we DARE to delete??How long do we save data?Issues and Considerations

• Infotypes: 9XXX• Some archiving objects not

compatible with current setup

• Cost?!?

• Some ILM objects are hardcoded with country key

• Some Infotypes does NOT have an ILM object

• New ILM objects are delivered in SAP notes

Page 25: The use of SAP Information Lifecycle Management (ILM) for ... · SAP NetWeaver Information Lifecycle Management (SAP NetWeaver ILM) enhances the SAP standard delivery with the ability

25SAP ILM | Stian Windsland | 07-June-2018 © 2018 Capgemini. All rights reserved.

Any Questions?