SAP System Risks & Controls

Steve Biskie

Denver, CO
Send Message

Steve Biskie is co-founder of High Water Advisors, a consultancy that helps organizations improve governance, risk management, compliance (GRC) and audit processes. He specializes in transforming inefficient, outdated, and compartmentalized processes and technologies to optimize GRC and audit performance and generate tangible value. A leader in the audit and compliance space for more than 20 years, Mr. Biskie has become most well-known for his work helping Fortune Global 500 organizations understand and manage the risks within complex ERP systems such as SAP and Oracle. Additionally, he is a thought leader and strategic expert on implementing high-value, sustainable analytics and continuous auditing programs. Steve started his career as an external auditor for Deloitte & Touche (Deloitte), where he was first exposed to both ERP system implementations and data analytics. He has since redesigned the global IT risk consulting practices for several large firms, led the compliance program for a multi-billion dollar insurance organization, and overhauled the consulting and training offerings and delivery model for a major provider of technology for audit and compliance professionals. Mr. Biskie was first exposed to SAP in the mid-90s, while working as an external auditor for Deloitte. He has been involved with SAP systems in a variety of roles, including as an external auditor, internal auditor, consultant, implementation team member, compliance team lead, and SAP Steering Committee Chair. Mr. Biskie worked directly with SAP as part of the SAP Influence Council for the Management of Internal Controls (MIC) tool, the first iteration of what is now the SAP GRC suite. He was the keynote speaker at the first Sarbanes-Oxley for SAP Customers event. A much sought-after trainer on SAP governance, audit, and control topics, Mr. Biskie has taught thousands of business, IT, and audit professionals about dealing with the intricacies of SAP. He is consistently rated as a top speaker at the SAP GRC conference (a collaboration between SAP and SAP Insider). Mr. Biskie was an Expert Reviewer for the 2009 publication Security, Audit, and Control Features: SAP ERP (3rd Edition), and in 2010 authored Surviving an SAP Audit (SAP Press). He also teaches both beginner and advanced SAP auditing courses through the MIS Training Institute. Mr. Biskie was also first exposed to data analytics while with Deloitte, where he was a part of the team that developed Deloitte’s first statistical inventory cycle- counting applications. He became proficient with Easytrieve, SAS, MS Access, and ACL during the period, and eventually developed Deloitte’s first extensive data analysis routines for SAP system audits. Always a proponent of smarter auditing through the use of data analysis, Mr. Biskie has been speaking on the topic of continuous auditing and monitoring for more than a decade, including multiple keynote presentations on the topic. During an SAP event where he invited ACL Services (ACL) to co-present on a continuous monitoring topic, he struck up a conversation that eventually led to his being hired by ACL. During his more than five year relationship with ACL, Mr. Biskie re-designed ACL’s training and consulting strategy, led numerous sessions and interactive events on developing sustainable analytics programs, and managed many of ACL’s largest and most strategic client consulting initiatives within many Fortune 100 clients. He is the lead instructor for the Successful Data Analytics course offered through the MIS Training Institute, and is considered an expert on interrogating SAP data, among other ERP systems.