Company/Time frame: MWV(WestRock), Richmond, VA June 2014 – October 2014
Position: Project Manager
Project description: MWV has a SOC deficiency in that employees had multiple ids and as they changed positions their access followed them even if it was not longer needed. The deficiency had to be addressed by the end of the year or penalties would be assessed.
Challenge: The project required the interfaces between SAP and MWV’s ID vault system. Two different subcontractors were used to make the necessary changes. Plus we had to clean-up IDs that were no longer needed or duplicates. MWV operates in a large number of country around the world with different cultures, government regulations, and philosophies. Brazil was particularly a challenge. Finally, shortly after taken over the project, the primary lead business subject matter expert resigned.
Action: We implemented a significantly tighter interface between their operational system such as SAP, BPCS, and others to their ID vault. Over 32,000 old or duplicate ids were deleted. A much more strict review of user access was put into place where managers had to review their employees access quarterly and during on boarding and off boarding.
Result: The project was completed on time and within budget. WestRock has not been written up for a SOC deficiency since this project was completed.