We don't know whether the most recent response to this request contains information or not – if you are Thomas please sign in and let everyone know.

Security and Compliance Software

We're waiting for Thomas to read a recent response and update the status.

Dear University of Bristol,

Can you confirm the SAP ERP version you are currently using?

Who provides your SAP Security, Authorisations and Role Design support?

Can you please confirm if you currently use SAP Access Control?

If you do use Access Control, what version is installed (options are v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP Access Control install?

Can you please confirm if you currently use SAP Process Control?

If you do use Process Control, what version is installed (options are v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP Process Control install?

Can you please confirm if you currently use SAP Risk Management?

If you do use Risk Management, what version is installed (options are v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP Risk Management install?

Can you confirm if you currently have any other SAP GRC software installed?

List of SAP GRC software includes, but not exclusive to:
i. Business Integrity Screening
ii. Single Sign-On
iii. Identity Management
iv. Audit Management
v. UI Masking
vi. UI Logging
vii. Read Access Logging
viii. BusinessObjects Access Control
ix. Versa GRC

If you do not have any SAP GRC installed/utilised, are there any plans to purchase and install the GRC software?

If you have implemented any of the aforementioned software and have a support contract what is the renewal date of that contract?

Where is your SAP infrastructure located and in what format?

When is the contract for third party support of your SAP infrastructure due for renewal?

Where do you advertise any SAP related procurement opportunities?

Yours faithfully,

Thomas

University of Bristol FOI mailbox, University of Bristol

Thank you for your e-mail.  The University will endeavour to respond to
your request under the Freedom of Information Act within 20 working days.
 However, we are currently experiencing a delay in providing responses.

We are currently short staffed and have a significant backlog
of requests which we are working through as quickly as we can.  This means
that some responses may be delayed beyond the statutory 20 days.  We
apologise for any inconvenience that this may cause. We have contacted the
Information Commissioner’s Office to explain the situation.

 

We may need to ask you certain questions to clarify your request to ensure
we fully understand what information is being requested. If so, the 20
working day deadline will be calculated once we have received such
clarification. 

 

The University's A-Z index can help in locating information that is
publicly available on the University's
website: [1]http://www.bristol.ac.uk/index/

 

Our Publication Scheme is available
at: [2]http://www.bristol.ac.uk/media-library/s...

 

The Higher Education Statistics Agency (HESA) annually publish certain
data about students and higher education, and also have a bespoke data
request service: [3]https://www.hesa.ac.uk/

 

For further information about the University's FOI procedure, please
see: [4]http://www.bristol.ac.uk/secretary/foi/

References

Visible links
1. http://www.bristol.ac.uk/index/
2. http://www.bristol.ac.uk/media-library/s...
3. https://www.hesa.ac.uk/
4. http://www.bristol.ac.uk/secretary/foi/

University of Bristol FOI mailbox, University of Bristol

Dear Thomas,

 

We write further to your freedom of information request dated 15th
November2018. In order for us to deal with your request we require you to
provide your full name to enable us to distinguish you from other
applicants.  Without this information, your request does not meet the
criteria for a valid request for information set out in Section 8 of
the Freedom of Information Act 2000 and is therefore refused. 

Please note that if no clarification is provided within 20 working days
your request for information will be considered closed.

 

Kind regards

 

Freedom of information team

 

Dear University of Bristol FOI mailbox,

My full name is Derek Thomas.

Yours sincerely,

Thomas

University of Bristol FOI mailbox, University of Bristol

Good Afternoon,

 

Please accept our apologies for the delay in responding. We have
experienced a significant volume of FOI requests which have prevented us
from meeting our statutory deadline. Can you please advise if you still
require this information?

 

If we don't hear from you within seven days then we will assume you no
longer require this information and close the request.

 

Kind Regards,

 

Freedom of Information Team

University of Bristol

 

 

To: SecOInformation Governance ([University of Bristol request email])
From: Thomas ([FOI #532967 email])
Title: Freedom of Information request - Security and Compliance Software
Sent: 16/11/2018 07:16

Dear University of Bristol,

Can you confirm the SAP ERP version you are currently using?

Who provides your SAP Security, Authorisations and Role Design support?

Can you please confirm if you currently use SAP Access Control?

If you do use Access Control, what version is installed (options are v5.3,
v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP
Access Control install?

Can you please confirm if you currently use SAP Process Control?

If you do use Process Control, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP
Process Control install?

Can you please confirm if you currently use SAP Risk Management?

If you do use Risk Management, what version is installed (options are
v5.3, v10.0, v10.1 or v12.0)?

Do you have a support contract with an external provider to support SAP
Risk Management install?

Can you confirm if you currently have any other SAP GRC software
installed?

List of SAP GRC software includes, but not exclusive to:
i. Business Integrity Screening
ii. Single Sign-On
iii. Identity Management
iv. Audit Management
v. UI Masking
vi. UI Logging
vii. Read Access Logging
viii. BusinessObjects Access Control
ix. Versa GRC

If you do not have any SAP GRC installed/utilised, are there any plans to
purchase and install the GRC software?

If you have implemented any of the aforementioned software and have a
support contract what is the renewal date of that contract?

Where is your SAP infrastructure located and in what format?

When is the contract for third party support of your SAP infrastructure
due for renewal?

Where do you advertise any SAP related procurement opportunities?

Yours faithfully,

Thomas

-------------------------------------------------------------------

Please use this email address for all replies to this request:
[FOI #532967 email]

Is [University of Bristol request email] the wrong address for Freedom of
Information requests to University of Bristol? If so, please contact us
using this form:
https://www.whatdotheyknow.com/change_re...

Disclaimer: This message and any reply that you make will be published on
the internet. Our privacy and copyright policies:
https://www.whatdotheyknow.com/help/offi...

For more detailed guidance on safely disclosing information, read the
latest advice from the ICO:
https://www.whatdotheyknow.com/help/ico-...

Please note that in some cases publication of requests and responses will
be delayed.

If you find this service useful as an FOI officer, please ask your web
manager to link to us from your organisation's FOI page.

-------------------------------------------------------------------

We don't know whether the most recent response to this request contains information or not – if you are Thomas please sign in and let everyone know.