Four phases. Four deliverables.
You can join at any phase and stop after any phase. Each one ends in a document you keep.
-
Read the landscape
We pull usage data, examine the current role structure, run a conflict analysis and assess Fiori readiness. No design decisions yet, just an accurate picture of where you are.
Deliverable: baseline report with a prioritised remediation list
-
Design the catalogue
Business roles agreed with process owners, derived structure and org-level strategy settled, naming standard fixed, SoD position decided before anything is built.
Deliverable: signed role catalogue
-
Build and test
Roles built, positive and negative testing run with the business, defects turned around inside the programme's test cycles rather than after them.
Deliverable: tested roles and test evidence
-
Hand over
Support model, run book, recertification and emergency access processes handed to your team, with the evidence pack an auditor will ask for.
Deliverable: run book and evidence pack
How we work with your system integrator
We are not a replacement for your SI and we don't compete for their scope. We own the authorization workstream inside their plan, work to their milestones, and give the programme manager one person to ask about security status.
In practice that means we join the same stand-ups, raise defects in the same tracker, and hand over into the same support model.
What we need from you
- Read access to the current landscape and usage data
- Process owners available for role design workshops
- A named business owner for the SoD decisions
- A place in the programme's test cycles
Bring us in at the gate that suits you.
Phase 01 stands alone as a fixed-price baseline assessment if you want to understand your exposure before committing a workstream.