Danone needed to comply with the Sarbanes-Oxley requirements from both a business process and IT standpoint. In particular, this applied to all management of corporate processes and its Human Resources organizational processes. The law in fact stipulated – for data security reasons – that the IT identity of personnel leaving the firm be deleted as of their exit date, with the consequent suspension of any access to sensitive information(intranets, email, databases, ERP, etc.).
Danone selected OpenText’s Business Process Management (BPM) software, which was provided and implemented in Italy by OpenText BPS partner, ICON to manage the organization of its corporate processes and meet the needs of the Sarbanes-Oxley requirements.
The first process implemented using OpenText MBPM (formerly Metastorm BPM) enabled personnel organization management, including notification of the creation – and subsequently of the cancellation – of any entries to its network or applications, as well as modifications of authorization profiles based on organizational changes, in compliance with separation of duty regulations.
The process is indexed according to job function and designed to cover all related departments upon the arrival of new company personnel including human resources and administration, for financial benefits such as lunch tickets, infrastructure, for benefits such as cars and mobile phones, the internship department (for managing trainees), and IT for managing and supplying hardware and software to the related users, in addition to hierarchical reporting of the new hire.
The main advantage Danone has realized from its new organizational management process is the ability to maintain a central database updated in real time covering all Danone employees’ personal data. This enables the acceleration of any connected processes, since all of the processes refer to the same database for the corporate job functions involved.
- Ability to maintain a central database
- Real time updates of personnel information
- Provides control over processes through centralized information
- Helps to better manage activities and saves time
- Sarbanes-Oxley compliance