Jörg Altmeier, born 1967, is working for over 17 years as a management consultant in the fields of knowledge, processes, quality, information systems and security. One of his major scopes is the integration of ERP-Systems with quality management and governance, risk & compliance concepts. Jörg Altmeier is managing partner at wikima4. Education Diplom Kaufmann (University of Saarbrücken, Germany), MTQ (University of Kaiserslautern, Germany) He completed his studies in economics, informatics, and total quality management at the Universities of Saarbrücken and Kaiserslautern, Germany. Certified Information Systems Auditor (CISA) of the Information Systems Audit and Control Association (ISACA) Certificated TQM Leader of the European Organisation for Quality (EOQ) and certificated Business Excellence Coach of the Swiss Foundation for quality promotion (SAQ) Certified AcceleratedSAP-Consultant Certified ARIS-Toolset-Trainer of IDS Scheer AG, Saarbrücken, Germany Lecturer at Hochschule Rapperswil (CH) for the Information Technology course of study Lecturer at the Hochschule Lucerne (CH) in the Executive Master in Information Security (MAS-INS), Master in Business Information Technologies (MAS-BIT), and Certified in Enterprise Resource Planning (CAS-ERP) Lecturer at the Hochschule Zurich (CH) in the BA Class for Enterprise Resource Planning (NDS-ERP) and at the University of Applied Sciences in Harz (Germany) in business information technology Lecturer at the University of Applied Sciences Würzburg (Germany) for the information technology course of study Lecturer of SAP (Switzerland) AG in various courses especially for introduction SAP, Introduction methods (ASAP) and Business Process Technologies Lecturer at the Fernfachhochschule Schweiz in the BA Class for Business Informatics Core Competences Moderation of Management- Workshops for solution finding processes Coaching of organisational development and software implementation projects Coaching of high complex or failed SAP implementation or optimization projects Coaching of SAP operating/ hosting environments with special focus on service level definition Set up and analysis of process architecture and process handbooks Assessments to define and realize optimisation potentials Conception and development of customer specific trainings Development and analysis of security concepts Quality- and risk management of SAP-implementation and optimization projects Scoping of SAP-implementation and optimization projects Conception and Implementation of Identity Access and Compliance Management requirements
Project experience Public Sector Project coach for the conception and realisation of a HERMES 95- compatible realisation method for SAP implementation within a Customer Competence Centre Project coach for the Process optimization within a Customer Competence Centre with major scope of the technical aspects Security & Compliance Audits. Telecommunications Project coach for the SAP implementation with the components FI, CO, MM, SD, PM Special expertise project member for conception and implementation of SAP internal controls for Sarbanes Oxley Act requirements Security & Compliance Audits Banking Project coach for the Reengineering of the finance and logistic processes including the modeling and visualisation Project coach for the reengineering training process for one of Switzerland s major banks Project coach for the development of a SAP Solution Centre within a big bank Head of project for the development and realisation of a SAP security concept Security & Compliance Audits. Aviation Project coach for the implementation of the SAP-Module PS. (Major focus: internal calculation for projects and project controlling) Supervising Auditor for a SAP Security & Compliance Audit as well as for a Data Center Audit Insurance Head of project for the development and realisation of a SAP security concept Project coach for the development of a SAP Solution Centre Security & Compliance Audits Engineering Project coach for the Security and Compliance team in multinational SAP implementation project with a special focus on SAP GRC, SAP Role Concept, SAP Security Architecture, Monitoring and Single Sign-On. Project manager for the implementation of the SAP module PS Project coach for the conception and realisation of quality management systems for an information organisation of a large enterprise Supervising Auditor for a SAP Security & Compliance Audit Retail Head of project for the implementation and roll-out of a SAP solution with the modules FI, CO, TR, HR and Retail Head of project for the implementation and the roll-out of a PKI-solution for Mail-, Data- and ERP-Systems Service Provider Head of project for the implementation of a SAP solution with the modules MM, SD, CS, HR, CRM and BW Utilities Project coach for the the concepttion and implementation of SAP Role Concept, SAP Security Architecture, and Monitoring. Project coach for the the conception and implementation of SAP Role Concept, SAP NetWeaver Identty Management, and Single Sign-On. Project coach for the implementation of SAP NetWeaver Identity Management Non Governmental Organizations Project coach for Security and Compliance with a special focus on SAP Role Concept, SAP Security Architecture, and Monitoring. Educational Services Speaker for seminars with the special focus on SAP security, authorization, and audit
Memberships The Information Security Society of Switzerland (isss) of the Swiss information club (SI) Speaker of the taskforce Security within SAP systems of the ISSS Round Table Chances and risks in SAP systems Information Systems Audit and Control Association (ISACA) Member of the Suisse foundation of quality promotion (SAQ) Business Excellence Club (BEX) of the Suisse Foundation of quality promotion (SAQ) Member of the NDS INS alumni organisation (SGRP) Member of the technical committee TK191 of the Swiss Standards Association Member of the technical committee SQ21 of the International Standards Association (ISO) German Speaking SAP User Group (DSAG) Global Security Alliance (GSA) Swiss Information Club (SI) Publications Benchmark Assessment for SAP Security Information Management, March April 2008 Governance in SAP Systems as an Enabler for Process Optimisation Netzwoche, October 2007 Governance of SAP Systems Netzguide IT Innovations, July 2007 Organising SAP Security securityzone Newsletter June 2007 SAP Security Benchmark Assessment IT Security, May 2007 Return on Security Investment with SAP Applications HMD 248, April 2006 SAP Security: Roadmap for Realization IT-Security 02/2005 Digital Signatures reduce Costs Schweizerische Informatik Revue, 3/2004 Security in SAP-systems IT-Security Focus, 3/2004 Usability First IT-Security Focus, 1/2004 Processes at High-tech, security at Stone Age level? Netzguide Security, 1/2004 Certificate based security of communication Netzguide Business Communication, 4/2003 Digital signatures reduces cost of processes Netzguide Security 2/2003 The Achilles heel of mysap.com-systems IT-Security-Special, 9/2002 Test of consultant s interview in Der Bund (CH) Mai 17th, 2002 Application security in SAP-Systems is a management task Netzguide E- Security, 4/2002 About Clockmakers and Consultants MQ Management and Quality, 1/2002 ERP-systems not prêt-à-porter io Management 7/8/ 2001 With SAP R/3 to Business Excellence to use opportunities, MQ Management and Quality, 4/2001 How to convince my management, Schweizerische Technische Zeitschrift, Nr. 2/2001 How to reach Business Excellence with SAP R/3 TQU-Forum for Quality June 2002, Ulm (Germany) SAP R/3 and knowledge management: a challenge for the knowledge management, TQU-Forum for quality, December 1999, Ulm (Germany)
Speeches References Recommendations SAP Security Monitoring a Change of Paradigmae? Speech at WG Revision & Risk Management, Walldorf April 2008 SAP Security Monitoring Speech at IT Security 2008, Munich April 2008 Evaluation of Governance Speech at Congress Governance in Companies using SAP, Zug, September 2007 Best Practises for SAP Security speech at the DSAG Technology Days, Karlsruhe February 2007 Security in SAP Systems speech at the IsSec, Berlin, December 2006 Efficiency of secure SAP Systems speech at the IT Risk Management Berlin, November 2006 Roadmap for a successful Implementation of secure SAP Systems speech at the IT Security, Munich, May 2006 SAP Security speech at the ISMS Toolbox Forum, June 2005 Security of Business Applications speech at the Swiss Security Summit, September 2004 Successful factors of a SAPimplementation speech at the college in Aschaffenburg (Germany), January 2003 Quality assurance in IT-security speech at the Euroforum IT- Sicherheit 2001, November 2000, Zurich We can provide the necessary contact information upon a specific request. Joerg is one of the pioneers in Switzerland recognizing the importance and the challenges in securing SAP systems. He organized and educated the SAP user community in Switzerland and was able to take even influence in the security practice of the vendor. He is achieving results with great engagement and a lot of enthusiasm and energy. Giampaolo Trenta, Bank Julius Baer Joerg has brought state-of-the-art knowledge and expertise to the table. His consulting approach and the best-practices I could gain from him and his team allowed an accelerated introduction of new concepts and the implementation of a secure and compliant system. Michael Bosshard, Zurich Financial Services I hired Joerg as a SAP security specialist. I highly rate him for his professionalism and excellent technical know-how. He not only delivers very good concepts but also implements them on time and within budget (really good value) against all odds and political difficulties! I know him as a hard working personality focu-sed on jointly set goals. He gave me the confidence to complete a challenging task in a difficult environ-ment. Rudolf Walther, Winterthur Insurances I liked to work together with Joerg; he always was gentle and competent in his job. Esther Hefti, Privacy Manager, Credit Suisse
Working with Joerg was always a pleasure. He has expert knowledge in so many GRC related areas and is always friendly and result oriented Guido Wagner, Security Management at SAP AG Joerg is an extraordinary expert in SAP Security. If your company needs an overall security concept for an SAP installation I can fully recommend Joerg as a consultant! Klaus Schimmer, SAP AG Joerg is both customer and detailoriented expert, who watches the balance sheet like a hawk, yet without losing sight of the strategic objectives. He has a deep and detailed solid knowledge of SAP systems. Usama Abdelhamid, Ciba SC Joerg has a unique combina-tion of SAP-specific audit and security know-how and at the same time management understanding and leadership skills which allows him to help SAP shops to tackle the most critical area when it comes to security: responsibility. Sachar Paulus, former CSO, SAP AG Joerg worked for us as an instructor as well as an implementation partner for our ERP business suite. He was one of our best instructors. He managed to engage customers as participants and get them to easily understand complex integrated business process-ses. I can recommend him any time. Hajo von Kracht, SAP AG We are happy, that wikima4 and Joerg provides consulting services to us. He is probably the best authority on his field you can find! Jean-Luc Nottaris, Organization and Information Town of Zurich Whenever SAP knowledge was requested I could rely on Joerg's amazing expertise and experience. His partnership was a real win/win situation and a tremendous enrichment for our business. Also, his strategic well organized events were highly appreciated. Michael Jäger, Computer Associates Jörg has a very detailed knowledge about SAP-Security requirements. Combined with his processanalytical skills I appreciate to have the opportunity to cooperate with Jörg in customer projects. Enno Hoffmann, Siemens It's always a pleasure to discuss issues and work with Joerg. He has a solid understanding of (SAP) information and IT-security as well as high professional competence. I have been highly satisfied with the work Joerg performed and the way he worked with my staff on a joint audit. Besides his professional expertise, Joerg also has a great personality making work with him both fun and easy. Rolf-Christian Andersen, Baloise Deep security expertise in the SAP environment Martin Frick, Avis Jörg has a deep and up-to-date knowledge in assessing SAP security. He is both a good speaker and a hard worker. Jörg can bring security require-ments into realizable concepts. If security in your SAP systems is important to you, I recommend Jörg as the consultant to achieve this goal. Alex Wyss, Cantonal Bank of Zurich Joerg has been a dedicated and loyal partner, representing our company in the most professional way possible, engaging heavily on our products and solutions. In a very short time-frame he was able to build a superb reputation in the Swiss market, successfully penetrating it. He is a very intelligent and precise individual and 100% trustworthy. Michael Struss, McAfee Joerg held two excellent speeches about risk management in SAP systems at our conferen-ces. The participants gave him a very good assessment. To work with him is really agreeable, because he is very professional. Stefanie Schiebenhoefer, Computas Especially I appreciated his input regarding methodologies and his capability to focus on integrated processes. He did not the "usual" work in manage-ment consulting - delivery of nice slides and papers - he always designed and implemented solutions that fulfilled the clients requirements and levereged the clients business. Martin Biedermann, CFP