SAP Analytics
Thought Leadership

It is said that there is no accounting for taste. Meaning, there is no mathematical formula that can define and score what individuals prefer. This is because each person has their own “taste” or set of subjective preferences they find appealing, and attempting to distill this highly variable process of selecting what one finds attractive, tasteful, even beautiful to a digital formula for universal criteria is considered impossible.

For some reason, this same subjectivity has reigned in the world of Enterprise Performance Management (EPM) solutions for too long, as I will argue. With the advent of xP&A (Extended Planning & Analysis), which can be thought of as high-intensity EPM, deciding which solution to buy is more critical than ever.

As with most specialized software programs, it is usually not suggested to implement SAP BPC without the assistance of a consulting partner.  Many projects require expertise that most EPM administrators do not have, and so it is recommended to find a partner that can ensure success.  Choosing this partner is an important decision.  Here are a few of the top things a company should look at when deciding on an appropriate organization. 

A risk is the possibility of an event or a condition that could negatively impact a project. There are many events or conditions in any EPM BPC implementation that can derail the project, because BPC is a complex tool that touches many areas of your organization. This article is intended to help mitigate risk.

Overview

SAP Disclosure Management is an application within the Enterprise Performance Management (EPM) suite.  It is used to improve organisations’ reporting where multiple users need to contribute to reports, and accuracy and consistency is critical. Key examples are the Annual Report and Accounts, returns to financial markets and regulators, and internal reports such as board report “books”.

Disclosure Management, as a process, is also known as the “last mile of finance”, where the culmination of all previous steps – financial close, variance analysis, and re-forecasting – are all key ingredients in what is reported to external stakeholders at the culmination of all subordinate tasks. In today’s world of increased expectations of closing faster, integrating financial and operational processes via advanced versions of EPM  – like xP&A – the appetite for more integration, automation, and on demand timing is at the highest point ever.

The business case for Disclosure Management is that it manages and streamlines the process of bringing together multiple data sources and text required in external reporting all of which are owned and authored by multiple teams and which require approval by multiple approvers.  Some clients choose to outsource performance of this function to a third-party service provider, while others purchase tools for in house use from vendors like Workiva and SAP. We won’t weigh the value of internal or external functionality in this space, but if a decision is taken to perform this function internally, this article provides an overview of the business case for and operational structure of SAP’s Disclosure Management product.

Business Case

The below diagram created by SAP demonstrates the issues faced in reporting that Disclosure Management is designed to streamline.

A typical process leading to a major reporting output such as an annual report or regulatory filing will often have a wide range of data sources.  For example, General Ledger systems, Enterprise Performance Management applications such as SAP BPC, SAC, Group Reporting and BFC as well as manually created inputs such as written text.  These data sources often feed into numerous Excel and Word documents that form part of the reporting output.  The report sections require approvals and collaboration within the organisation that can be difficult to monitor and coordinate.  The sections of the report that have been created separately need to be put together into the final output.  In the past, the output may have only been a printable format such as a Word document or PDF file, but a number of legal and regulatory filings require electronic submission, notably via XBRL.

Description:
Critical vulnerability identified for SAP Systems based on SAP JAVA Stack.
The RECON (Remotely Exploitable Code On NetWeaver) vulnerability has a CVSS score of 10 out of 10 (the most severe)

Symptom:
LM Configuration Wizard of SAP NetWeaver AS JAVA, does not perform an authentication check which allows an attacker without prior authentication, to execute configuration tasks to perform critical actions against the SAP Java system, including the ability to create an administrative user, and therefore compromising Confidentiality, Integrity and Availability of the system.

The COVID-19 pandemic hit just like the children’s game of musical chairs. As the music of our economy stopped, if you were not near a safe place to sit, you were caught out in the open…finding yourself at risk. Similarly, your EPM solution was likely being enhanced, and upgraded on a certain path before the virus came into being. Any EPM strategy not ready for intensified operations learned the hidden weaknesses of their solution.

To make you feel better, almost no EPM solution was ready for this.

Whatever the state was of your EPM solution, that is the tool you had to wield as you navigated your organization through  the impacts of the virus. As we said in part one of this blog series, the jarring impact to the market doesn’t specifically need to be the virus, it could be anything. Just some unpredictable market influence that won’t wait for long running processes.

"The Chinese use two brush strokes to write the word 'crisis. ' One brush stroke stands for danger; the other for opportunity. In a crisis, be aware of the danger--but recognize the opportunity." 

John F. Kennedy, US President 

It's the sort of blockbuster movie plot you'd expect to see while sitting in the dark confines of a movie theater, booming audio and a gasping crowd. A thrilling plot has your eyes riveted to the screen, where the dramatic tension is only broken when you run out of popcorn or the movie ends. In that scenario, you can return to your "real life" in a little over an hour, with no discernible life altering impact. It is now clear this COVID-19 provocateur is no movie; this virus will not go away so quietly without leaving an indelible impact on the world.  It most certainly will impact how you and the leadership team rely on your EPM software and Enterprise Performance Management in general. 

For this article, we'll define EPM software as Gartner does as dealing with “the process of monitoring performance across the enterprise with the goal of improving business performance.”  Other activities we'll include under the Enterprise Performance Management umbrella are FP&A modeling, budgeting, forecasting, reporting, and consolidation.  Keep reading to find out how our plot unfolds. You'll learn how to avoid high latency, Excel centric planning.  You'll also learn 3 stages of recovery and the leadership principles needed to accelerate  your Enterprise Performance Management and remodeling during COVID-19.