© 2016, Amazon Web Services, Inc. or its Affiliates. All rights reserved.

Migrating SAP HR to AWS under the Strict Requirements for Personal Data under

European Data Privacy Regulation

Martin Götz, RWE IT CZ

Agenda

Keyfacts– Appsoverview,technology,security

Introduction of RWEITCzech

Customer Feedback,lessonslearned,next plan usecase

1

2

3

4

5

UseCase– SAPHRinAWS

Businessreasons– Whymoveto the cloud ?

RWE in Czech Republic

mioEUR

Nr.ofEmployees~4500

Since2002,SSOstoragecapacity2.3bcm, gridca.63860km

Revenue: 1.607mio EUR(2014)

Customers:1,5mio ingas,300tsd.inelectricity

Agenda

Keyfacts– Appsoverview,technology,security

Introduction of RWEITCzech

Customer Feedback,lessonslearned,next plan usecase

1

2

3

4

5

UseCase– SAPHRinAWS

Businessreasons– Whymoveto the cloud ?

Major driving forces behind utilities transformation

Erosion of old business models means that utilities are looking for:

• new business models, • cutting costs, • improving customer service, • more outward orientation – ability to integrate 3rd parties

IT Challenge – how to support the company within this change

Long term IT strategy to support utility transformation drives cloud adoption

• internal RWE goal: implement long term IT strategy ≈„Commodity IT versus differentiating IT“ & “Manage IT –not make IT”

• get resource flexibility, lean capacity management andstandardize risk, security management and BCMprocesses “out of the box”

• support business leveraging IT market trends & newdevelopment

Business expectations

• improve time to market for IT solutions

• cut operating costs and redirect savings into development in prospective areas

• compete in digital area - raisematurity level of RWE IT solutions

• provide future-oriented IT solutionswith respect to investment/disinvestment

• avoid technological lock-in – clear exit strategy (“Infrastructure as a Code”)

• avoid brand impact due to security & data privacy issues

Considering Cloud Pros and Cons

• Fast availability of resources –agility, scalability (up/down), “infra as code”

• Simplification of support processes (BCM, audit, energy mgmt., HR, innovation, …)

• Standardization of data security (requirements, measures and operating model)

• Cost and usage transparency

• Enforcing interoperability and best practice in application design (de-facto standard)

• Concerns around Data Privacy, Data security and BCM due to loss of the physical proximity

• Dependency on innovation cycle of the cloud provider

• Lack of “best practice” becomes visible due to speed of deployment (in lifecycle mgmt., IT architecture and documentation)

• Little space for custom tailored solutions

• In utilities environment CAPEX might be pushed by „traditionalist“ regulators

Agenda

Keyfacts– Appsoverview,technology,security

Introduction of RWEITCzech

Customer Feedback,lessonslearned,next plan usecase

1

2

3

4

5

UseCase– SAPHRinAWS

Businessreasons– Whymoveto the cloud ?

Long-term target: 100 % cloud based utility ITGeneration Grid Sales&Customer services Portfoliomgmt. Support

Applicationservices

Datacenterservices

Privatecloudenvironment– standardAPI,SSCh,Catalogofservices,Chargemodel,Automation

Publiccloudenvironment

CorporateMgmt.

CNGcustomers(ZIS_CNG)

Heatenergy(Fatep)

Consumptionofelectricityproducedfromgas(ZIS_ELE)

Electricityandheat(Filip)

Gridapplication

Meteringsystem(AVE)

Centraldialaddressesandparcel,Externalmapportal

WorkForceMgmt.

Gasdistributionoffice(GESmallword)

Displaydata(microstation)

Anticorrosionpro-tection(Gasacor)

Calculationsofpressure ratios(Simone)

Maintenance,Evidenceofconstructions,logistic,etc.(SAPPM,IS-U)

PortfolioMgmt.(Lancelot)

Energytradingsystem

Nominationpredictionsystem

Commercialdispatchingsystem

GasStorageNomination

CZ

GasStorageNomination

DE

Wholesalesportal_gas

BidMgmt.RPM

Portalgradualpurchase

Customerservices

RetailCRM(SAP)

PortalsforDSO(OpenMinder)

Individ.CRM(Leonardo)

Callcentrum(Cisco)

SAPIS-U/BW

MasterdataBillingBilling–

planningmodels

Meteringevidence

IDECustomerservices

Payments&receivables

Legacy

Datawarehouse

FI-CA

ERP

Classic(archive)

HR

HR(SAP)

Web

(OpenText)

OutputPrinting(Doxee)

DocumentMgmt.system

DMS(EMC) PDFdocAdobe) Scan(Kofax)

Security

C4/conflex

OthersSmallapps(mass)

MIS

BWaBPC(SAP)

Cognos,SPSS(IBM)

FinanceFinance,risk

PublicCloudManagementplatform

Privatecloudenvironment Publiccloud(e.g.onepossibilityisSAPHANAinAWS)

CloudManagement Platform

PublicCloud PublicCloud

BWBPC

Technology

ServiceDesk Workplaces Printers

Steps towards 100% cloud based IT landscape

Pre- analyzeOutcomes - whichareacanbringthebiggestvaluecontributionof

cloud)

Applicationprofiling

getrelevantdataofapplication

Cloudificatonevaluatecloud

criteria

Premigrationphase

onpremisehygieneonyour

infra

Sandboxing incloud

Transition migration,service

setup,etc.

Operationmanagement

Optimizationprocedureworkwith

opportunitycost

Eightstepprojectmethodology wasapplied

Diagnostic/paperworkphase Implementation/deliveryphase Managementphase

Service delivery model

Assigment in basic units (i.e. multiple machines,..)

Self service portal

Deliveryunit

• IaaS• PaaS• BDaaS / SAPaaS• SaaS

Service cataloq management

Management portalService c loudspecialistts

Reporting

Contract inforrmation management

Billed party information collection

Cloud service management

„ Cloud Management Platform“

Usage status v iew ( hour, month,year)

Service modification

Type ofservices

Service definitionService

termination

Database server

Web server

App server

Infrastructure as a Service

CloudDevOPS Orchestration (reguest management / workflow)Event/Incident Management

Performance management

Patch management

Resourcepool

managem

ent

Application for service use based on Iaas/PaaS/SaaS)

Provis ioning

Orchestration (reguest management / workflow)

Provis ioning

Orchestration (reguest management / workflow)

Provis ioning

Security management

Define Security model

AWS Foundation Services

Compute Storage Database Networking

AWS Global Infrastructure

Regions

Availability ZonesEdge Locations

NetworkSecurity

Identity & Access Control

Customer applications & contentRWE IT responsible for security IN the Cloud

AWS takes care of the security OF the Cloud

YouInventory &

ConfigData

Encryption

Assess and describe possible data risk scenarios

Expanded industry security standard w/o invest

Internalsecurity policy

DCBrno

Cloudprovider

ISO/IEC2001 ISO/IEC27001

SOC2

ISAE3402

ITAR

SOC3

HIPAA

CSAPCIDSSL1

DICAAP MPAA IRAP

Other industry compliance standard

before now

Agenda

Keyfacts– Appsoverview,technology,security

Introduction of RWEITCzech

Customer Feedback,lessonslearned,next plan usecase

1

2

3

4

5

UseCase– SAPHRinAWS

Businessreasons– Whymoveto the cloud ?

Use Case SAP HR: Migration process

Use Case SAP HR: Fallback planWe have designed two fallback scenarios for SAP HRP migration to AWS.• Imminent Fallback - when productive migration is performed, on-premise servers and SAP

installation remain intact and in case of negative test results prior to productive go-live on AWS.SAP Solution is started back on-premise without any particular delay.

• AfterGo-LiveFallback - on-premise installationisshutdown Itisnotpossibletostartbackon-premise SAPsolution becauseofchangesonOracle DB.Onlywaytogetthesechangesintoon-premise AIXOracleDBwouldbeexportonAWSandimportbacktoon-premise DB.Thiswouldbeverytimeconsuming.Aftergo-liveregularbackupoperationisput inplaceonAWSsoOracleDBisbackeduptoS3.On-premiseweprepareIntelinfrastructuresimilartoAWSwithOracleonLinux,forcompletenessalsocurrentAIXDBisdepicted.In case of fallback, we restore Oracle S3 backup into on-premise Oracle DB on linux and start on-premise SAP Solution with newly restored latest data.

Use Case SAP HR: Business feedback

• Improved performance of system within the fast close period (inc. fix time), capacity “ondemand” to cover the peaks

• Economic benefits – savings cca. 10 - 12% against on-premises solution

• Ability to switch on/off e.g. testing environment – pay for what you consume - utilization ofHW is not the topic of heated discussions and cumbersome planning & logistics proceduresanymore

• Data security level improved – volume and DB are encrypted

Leassons learned• Apps profiling key to help collect all information for services to be operated – internalhygiene

• Cloudification improved service delivery maturity level and pushed understanding keydrivers of the services

• Helps to increase know–how of IT apps team, attractive for external developers – visibleimpact to team spirit & productivity

• Build strong engineering cloud „crazy“ team – combine internal and external

• Develop internal skills with external partner who has a proven project methodology

Next migration activites SAP IS-U, SAP CRM16

1 2 3 4 5 6 7 8 9 10 11 12

IS- U on premise

CRM in AWSTest

IS-U in AWS

IS-U in AWS

CRM on premise

M4M1 M2

Development

M3 M5

POC in AWS

ProductiveCRM on premise

CRM on premise

Export / import tunning - testing

CRM in AWS

ProviderActivity

IS-U in AWSLearning

IS-U on premiseCRM in AWS

CRM in AWSIS-U in AWS

IS-U on premise

CRM on premiseIS-U on premise

system copyIBM pover

Preparation in AWSdowntimex86 on premise go – live AWS

PoC in AWS

Thank you!