Understanding the Organization's Aptitude

Fuchs Petrolub SE is a global group from Germany and the world’s largest independent lubricant manufacturer with approximately 5,700 employees.

In consequence of several prolific discussions on necessities as well as possibilities of strengthening the SAP security environment, Fuchs Petrolub got increasingly eager to know more about getting an external view on their status quo. The company wanted to identify its strengths and weaknesses and spot possible skill and knowledge gaps within its security governance.

Given a chance to help Fuchs Petrolub getting to know more about their SAP security posture, we proposed to conduct a Security Aptitude Assessment. The service’s objective is to provide a profound report on the different skills, knowledge, and responsibility gaps of the representatives of the three lines of defense (operations, security, audit).

A survey covering different security criteria operates as the centerpiece of this service. Defining the assessment scope together with Fuchs Petrolub gave the customer the chance to always keep an eye on the survey’s execution in the desired manner. This way of conducting the service meant minimal time and effort on the customer side. It was easily integrable into the daily work routine – a significant asset for our clients when order books are full.

After evaluating all results, NO MONKEY put on a follow-up workshop: In this context, we determined the applicability of the defined scope and discussed potential factors for mitigating and amplification.

Conducting the Security Aptitude Assessment enabled Fuchs Petrolub to overview potential skill, knowledge, and responsibility gaps. Therefore, the company gained more transparency – and this determining factor helps prevent miscommunication and security weaknesses within the organization’s IT operations, security, and compliance areas. NO MONKEY empowered Fuchs Petrolub to make their point in understanding their SAP security environment in a different, more in-depth way. As a result, the company acquired the ability to make more efficient decisions on their organization’s security posture.

The Security Aptitude Assessment service is an excellent starting point for companies to improve their security posture, i.e., to increase the security capabilities of the team. Going one step further, you need to create a common understanding and build bridges between the three lines of defense. To do so, NO MONKEY offers a core business application security workshop as a structured approach to lower the knowledge asymmetry between the different stakeholders for SAP security.