SAP LeanIX Technology Risk and Compliance
Proactively manage obsolescence risk and technology standards with Technology Risk and Compliance. Gain transparency of your technology layer, assess interdependencies, and ensure operational stability.
Overview
Technology Risk and Compliance discovers the infrastructure layer of your application landscape, including self-built software and IT components supporting your applications. With additional obsolescence risk views and the ability to visualize a tech radar, you are equipped with the right tooling to gain comprehensive visibility into the tech stack. It allows you to proactively manage tech risk and optimize technology usage throughout your organization.
The Technology Risk and Compliance supports two primary use cases: proactive management of obsolescence risk arising from outdated and unsupported technologies and technology standards management involving strategic optimization of technology infrastructure.
Use Cases of Technology Risk and Compliance
Obsolescence Risk Management
Obsolete technology no longer maintained or supported carries the risk of breaches, increased downtimes, and system crashes. These issues can result in financial losses, damage to reputation, and regulatory consequences. Obsolescence risk management is the process of identifying, evaluating, and mitigating the risks associated with technological obsolescence.
Technology Risk and Compliance enables you to proactively identify, assess, and manage risks associated with your technology infrastructure. Integration with ServiceNow and custom integration with other CMDBs enables you to automatically discover IT components and build a thorough technology layer inventory. Furthermore, Technology Risk and Compliance offers access to IT components in the reference catalog. It provides insights into lifecycle states, version details, and support information needed to continuously monitor the risk of obsolescence.
The LeanIX meta model relationships between IT components and business layer artifacts facilitate the assessment of unaddressed risks and their business impact. Through insightful reports, you can identify, analyze, and prioritize obsolescence risks, focusing on 'end-of-life' concerns and business criticality. Additionally, a dedicated dashboard offers transparency and insights for effective monitoring and measuring progress. With a holistic overview of obsolescence risk exposure, you can allocate resources efficiently to plan and address the risks effectively and ensure operational stability and business continuity.
For a detailed guide on how you can manage obsolescence risk, see Obsolescence Risk Management.
IT Component Fact Sheet Relations - Aggregate Risks From Technology Layer to Applications and Business Layer.
Technology Standards Management
This feature is currently in early adopter release and may not be available to all users.
Technology standards management involves establishing and enforcing standardized practices across an organization's technology infrastructure to ensure strategic alignment and optimization of an organization's technology stack.
The capabilities of the Technology Risk and Compliance help manage technology standards for self-built software and strategically optimize an organization's technology stack to prevent technical sprawl, complexities, and inefficiencies. By effectively managing technology standards, organizations ensure their technology stack remains relevant, containing only necessary, efficient, and beneficial technologies.
Technology Risk and Compliance extends the meta model by adding the microservice fact sheet subtype, along with additional fields and relationships that offer more context about each microservice.
Tech Stack Discovery with Technology Risk and Compliance
Technology Risk and Compliance allows you to automatically discover self-built software components such as microservices, software bill of materials (SBOMs), and tech stacks. The SBOM components are linked to the microservices, and it allows you to investigate the SBOM components in their business context. To learn more, see Software Bill of Materials.
Tech stacks are automatically identified from granular SBOM data by matching libraries against a curated tech stack catalog. If a library matches a tech stack, an IT component is generated and linked to a relevant microservice. In essence, libraries are aggregated as many libraries can match a single tech stack. Currently, the tech stack discovery supports the discovery of frameworks and databases.
You can then analyze the use of open-source components in their business context and meaningfully categorize your technologies using technology assessment attributes on the IT component fact sheet that is inspired by the Technology Radar from Thoughtworks.
Further, you can assess the tech stack for adoption using a tech radar report and create a single pane of truth for architectural decision-making. This focused approach allows you to streamline the use of technology and improve compliance with defined policies. To learn more, see Radar Report.
Having reliable and automated sourcing of tech stacks allows you to focus on identifying technological redundancies and drive clear governance over your portfolio of technologies.
A detailed guide on technology standards management use case will be published here soon.
Key Capabilities of Technology Risk and Compliance
| Feature | Capabilities for Obsolescence Risk Management | Capabilities for Technology Standards Management |
|---|---|---|
| Integration with ServiceNow | This integration automates the discovery of IT components and applications and helps you build your technology inventory swiftly. Real-time mapping ensures up-to-date information of underlying technology, providing enhanced risk visibility. | Automated discovery of IT components Real-time mapping and up-to-date visualization of the relationship between applications and underlying technology, providing enhanced risk visibility |
| Access to lifecycle-related information in the catalog | Enables users to retrieve lifecycle and end-of-support information for IT component fact sheets. Fact sheets are automatically enriched with these data along with information for many other attributes. Ensures organizations can stay informed about the status of their assets and make proactive decisions regarding upgrades, transformations, or replacements, making end-of-life asset management easier. | |
| Additional obsolescence risk management views in reports | Mitigated risk: Helps organizations to assess how effectively they've addressed and reduced risks. Missing data: Helps identify gaps in available information critical for risk evaluation, enabling focused data completion efforts. Unaddressed risk percentages: Helps prioritize and tackle risks that still require attention. | |
| Dedicated obsolescence risk management dashboard | Provides a centralized overview with relevant KPIs for monitoring the progress of your risk management initiatives. Share the progress and insights with stakeholders to provide transparency and foster deeper engagement. | |
| Technology discovery (Early adopter) | Automatic discovery of the tech stack makes the data more reliable & easier to maintain, eliminating the need for engineers to manually document information in LeanIX. | Automatically discover self-built software, e.g., microservices, software bill of materials, and tech stacks Easy to use REST API compatible with config-as-code. Automatically discover and ingest SBOM data generated during the build process. Auto-detect programming frameworks and database technologies derived from SBOM data and create tech stacks in the form of IT components attached to the microservice. |
| Software Bill of Materials View (Early adopter) | During cybersecurity incidents like log4j or SolarWinds, quickly identify the affected blast radius, such as microservices, applications, business capabilities, teams, etc., to effectively address the issues. Analyze how software components are used in your technology portfolio to understand the risks associated with self-built software in the business context to drive impactful IT transformation |
Related Resources
- For a detailed guide on ServiceNow integration in our documentation, see ServiceNow Integration.
- For a detailed and interactive tutorial on ServiceNow integration in our academy, see ServiceNow Integration.
- For a detailed guide on how to use IT components data from the reference catalog, see IT Components in the Reference Catalog.
- To learn about obsolescence risk views, see Technology Obsolescence Risk Views in Reports.
- To learn how to monitor risk management initiatives with the obsolescence risk management dashboard, see Obsolescence Risk Management Dashboard.
- To learn how to use the tech radar report, see Radar Report.
- See an example tutorial on analyzing location impact on risk mitigation and compliance: Tutorial: Managing IT Risks Associated with Data Center and Server Locations.
- For detailed instructions and insights into effectively managing technology obsolescence risks, see Obsolescence Risk Management.
Updated 3 months ago