SAP GRC Access Control · ABAP development · Replacing SAP IdM with GRC

Tailored SAP Security for Critical Infrastructures

Strategic Governance, Risk & Compliance concepts and profound technical ABAP excellence – seamlessly from a single source.

Request a conversation See our services

Our Consulting Approach

Since its foundation in 2014, Libossek IT-Consulting has stood for highly specialized and independent SAP consulting based in Fürth (Bavaria). As an owner-managed consulting firm, we provide holistic solutions without friction losses.

Our absolute core competence lies in the comprehensive support of SAP GRC Access Control in all its facets, coupled with profound technical expertise in ABAP development.

This synergy of strategic process understanding and technical implementation capability has proven highly effective: Our long-standing clients include leading enterprises and operators of critical infrastructures, including major corporations in the German energy sector.

Since 2014 SAP consulting, owner-managed
Concept and code SAP GRC Access Control and ABAP from a single source
Direct line You speak with the owner

Governance, Risk & Compliance

Security and Compliance at Enterprise Level

Growing regulatory demands leave no room for compromise. Whether it’s manual authorization assignments, undetected SoD (Segregation of Duties) conflicts, or audit findings – complex SAP landscapes require secure, automated processes. We design and implement custom-fit solutions that anchor your compliance requirements audit-proof within the system:

Consulting & Development

We bridge the gap between conception and technical realization.

Integrative GRC Solutions

  • Seamless integration of SAP GRC with SAP IDM
  • Replacing SAP IdM on the basis of SAP GRC, together with partners
  • Integration of third-party systems
  • Cross-process architecture

Custom Development

  • Profound ABAP development
  • Tailored system enhancements
  • Complex authorization logic at code level

SAP BRF+ & AI

  • Utilization of the Business Rule Framework
  • Rule-based process automation
  • Integration of Artificial Intelligence into authorization processes

Risk Design

  • Development of customer-specific risk matrices
  • SoD rule sets for SAP S/4HANA and Fiori
  • Fine-tuning of existing rule sets
  • Audit preparation and support

From Our Projects

We do not name clients. What we can show is the kind of work we do.

Industrial company, SAP Access Control 12.0

Requests that only fail at provisioning

Invalid values in access requests only surfaced when the user account was being created in the target system. Upstream validations tailored to what mattered for the customer improved the quality of the requests.

Group, SAP Access Control 12.0 and SAP IdM

Replacing IdM and upgrading GRC in one project

Both products are running out. We designed a path that keeps the existing landscape productive: a copied development system is converted first and serves as the build environment for the new provisioning. Test and production follow, and the plug-ins on connected systems only after the production cutover.

GRC customer, SAP Access Control in operation

Mitigations that quietly expire

Customer-specific enhancements optimize SAP's SoD review process. This makes it possible to proactively detect and prevent mitigations from quietly expiring.

Let’s Talk About Your Project

Briefly describe your situation: your GRC release, the deadline you are facing, or the open audit finding. You will speak directly with the owner.

Fabian Libossek, Owner

info@libossek-it-consulting.de +49 157 55 84 2086

LinkedIn XING