Security and Compliance Software

The request was successful.

Dear Arts Council England,

Can you confirm the SAP ERP version you are currently using?

Who provides your SAP Security, Authorisations and Role Design support?

Can you please confirm if you currently use SAP Access Control?

If you do use Access Control, what version is installed (options are v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP Access Control install?

Can you please confirm if you currently use SAP Process Control?

If you do use Process Control, what version is installed (options are v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP Process Control install?

Can you please confirm if you currently use SAP Risk Management?

If you do use Risk Management, what version is installed (options are v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP Risk Management install?

Can you confirm if you currently have any other SAP GRC software installed?

List of SAP GRC software includes, but not exclusive to:
i. Business Integrity Screening
ii. Single Sign-On
iii. Identity Management
iv. Audit Management
v. UI Masking
vi. UI Logging
vii. Read Access Logging
viii. BusinessObjects Access Control
ix. Versa GRC

If you do not have any SAP GRC installed/utilised, are there any plans to purchase and install the GRC software?

If you have implemented any of the aforementioned software and have a support contract what is the renewal date of that contract?

Where is your SAP infrastructure located and in what format?

When is the contract for third party support of your SAP infrastructure due for renewal?

Where do you advertise any SAP related procurement opportunities?

Yours faithfully,

Thomas

FOI, Arts Council England

Dear Thomas

 

Thank you for your request for information from Arts Council England.

 

I can confirm that this request will be considered in line with our
obligations under the Freedom of Information Act 2000. This means that we
will respond to your request in full as soon as possible and, at the
latest, within 20 working days (not including UK Public Holidays) after we
received your last email.

 

Our response is therefore due on or prior to Friday 14 December 2018, due
to the public holiday in Scotland (St Andrew’s Day) on 30th November.

 

If you would like to know more about how we will deal with your request
for information, you can find information on our website
[1]http://www.artscouncil.org.uk/who-we-are...
 

 

Alternatively for a more comprehensive look at information rights
legislation, please visit the Information Commissioner’s website
[2]http://www.ico.gov.uk     

 

If you have any further queries in the meantime please do not hesitate to
contact me.

 

Kind regards

 

Nick Carter
Officer, Information

Email [3][Arts Council England request email]   

 

[4]web | [5]twitter | [6]facebook | [7]instagram | [8]linkedin

 

I think [9]#culturematters – do you?

 

show quoted sections

FOI, Arts Council England

Dear Thomas,

 

Thank you for your request for information from the Arts Council.

 

As previously mentioned, I can confirm that this request was considered in
line with our obligations under the Freedom of Information Act 2000.
Please do let me know if you have any access requirements for the response
below.

 

Your request:

 

Can you confirm the SAP ERP version you are currently using?

 

Who provides your SAP Security, Authorisations and Role Design support?

 

Can you please confirm if you currently use SAP Access Control?

 

If you do use Access Control, what version is installed (options are v5.3,
v10.0, v10.1 or v12.0)?

 

Do you have a support contract with an external provider to support SAP
Access Control install?

 

Can you please confirm if you currently use SAP Process Control?

 

If you do use Process Control, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?

 

Do you have a support contract with an external provider to support SAP
Process Control install?

 

Can you please confirm if you currently use SAP Risk Management?

 

If you do use Risk Management, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?

 

Do you have a support contract with an external provider to support SAP
Risk Management install?

 

Can you confirm if you currently have any other SAP GRC software
installed?

 

List of SAP GRC software includes, but not exclusive to:

i. Business Integrity Screening

ii. Single Sign-On

iii. Identity Management

iv. Audit Management

v. UI Masking

vi. UI Logging

vii. Read Access Logging

viii. BusinessObjects Access Control

ix.Versa GRC

 

If you do not have any SAP GRC installed/utilised, are there any plans to
purchase and install the GRC software?

 

If you have implemented any of the aforementioned software and have a
support contract what is the renewal date of that contract?

 

Where is your SAP infrastructure located and in what format?

 

When is the contract for third party support of your SAP infrastructure
due for renewal?

 

Where do you advertise any SAP related procurement opportunities? 

 

Our Response:

 

Please find answers to your questions below.

 

Q: Can you confirm the SAP ERP version you are currently using?
A: SAP ECC 6.0 EHP 7

 

Q: Who provides your SAP Security, Authorisations and Role Design support?
A: Itelligence

 

Q: Can you please confirm if you currently use SAP Access Control?
A: We do not use SAP Access Control.

 

Q: If you do use Access Control, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?
A: Not applicable.

Q: Do you have a support contract with an external provider to support SAP
Access Control install?
A: Not applicable.

 

Q: Can you please confirm if you currently use SAP Process Control?
A: We do not use SAP Process Control.

 

Q: If you do use Process Control, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?
A: Not applicable.

 

Q: Do you have a support contract with an external provider to support SAP
Process Control install?
A: Not applicable.

 

Q: Can you please confirm if you currently use SAP Risk Management?
A: We do not use SAP Risk Management.

 

Q: If you do use Risk Management, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?
A: Not applicable.

 

Q: Do you have a support contract with an external provider to support SAP
Risk Management install?
A: Not applicable.

 

Q: Can you confirm if you currently have any other SAP GRC software
installed?
A: None of the products listed are installed.

 

Q: If you do not have any SAP GRC installed/utilised, are there any plans
to purchase and install the GRC software?
A: There are no plans to purchase and install the software.

 

Q: If you have implemented any of the aforementioned software and have a
support contract what is the renewal date of that contract?
A: Not applicable.

 

Q: Where is your SAP infrastructure located and in what format?
A: Our infrastructure is located on a UK data centre on virtual servers.

 

Q: When is the contract for third party support of your SAP infrastructure
due for renewal?
A: The contract is due for renewal in April 2019.

 

Q: Where do you advertise any SAP related procurement opportunities? 
A: All procurement is listed on our website. [1]www.artscouncil.org.uk

 

We hope you are satisfied with the way in which we have dealt with your
request for information under the Freedom of Information Act, however, if
you are not satisfied that this is the case then you are entitled to an
internal review. If you do wish for an internal review of the manner in
which we have applied the Freedom of Information Act in this case, please
contact me at the address above, within two months of the date of this
correspondence, explaining what specifically you would like us to review
under the Act. Alternatively you can detail your specific concerns in
writing and send them to the Chief Executive, Arts Council England, 21
Bloomsbury Street, London, WC1B 3HF or email
to [2][email address]

 

Subsequently, if you are not content with the outcome of the internal
review, you have the right to apply directly to the Information
Commissioner for a decision. The Information Commissioner can be contacted
at Information Commissioner’s Office, Wycliffe House, Water Lane,
Wilmslow, Cheshire, SK9 5AF.

 

Kind regards,

 

Paul Holmes

Assistant, Information

Arts Council England

 

0161 934 4474

 

[3]web | [4]twitter | [5]facebook | [6]instagram | [7]linkedin

 

I think [8]#culturematters – do you?

 

 

From: FOI
Sent: 16 November 2018 08:09
To: Thomas <[FOI #532963 email]>
Subject: RE: Freedom of Information request - Security and Compliance
Software

 

Dear Thomas

 

Thank you for your request for information from Arts Council England.

 

I can confirm that this request will be considered in line with our
obligations under the Freedom of Information Act 2000. This means that we
will respond to your request in full as soon as possible and, at the
latest, within 20 working days (not including UK Public Holidays) after we
received your last email.

 

Our response is therefore due on or prior to Friday 14 December 2018, due
to the public holiday in Scotland (St Andrew’s Day) on 30th November.

 

If you would like to know more about how we will deal with your request
for information, you can find information on our website
[9]http://www.artscouncil.org.uk/who-we-are...
 

 

Alternatively for a more comprehensive look at information rights
legislation, please visit the Information Commissioner’s website
[10]http://www.ico.gov.uk     

 

If you have any further queries in the meantime please do not hesitate to
contact me.

 

Kind regards

 

Nick Carter
Officer, Information

Email [11][Arts Council England request email]   

 

[12]web | [13]twitter | [14]facebook | [15]instagram | [16]linkedin

 

I think [17]#culturematters – do you?

 

show quoted sections