Key business processes including product marketing, order management, warehouse management, invoice processing, customer support and financial reporting are all dependent on IT systems. ...
Key business processes including product marketing, order management, warehouse management, invoice processing, customer support and financial reporting are all dependent on IT systems. A significant systems outage or loss of data could result in considerable disruptions to our business. Insufficient project management could delay the execution of projects critical to the Group or make them more expensive than planned.
To mitigate these risks, our IT organisation proactively engages in system preventive maintenance, service continuity planning and adherence to applicable IT policies. Data security is managed by restricting user access based on job description, requiring password changes at predefined frequencies on our most critical systems and adhering to data protection regulations. We perform multiple backups at alternating data centre locations for the Group’s core enterprise resource planning system (ERP) on a daily basis. In addition, for the ERP system, our contingency solution allows us to quickly switch to a remote site if necessary – without any loss of data. System security, controls and reliability are reviewed and tested by the Internal Audit function.
Our target availability of 99.7% for major IT applications was exceeded in 2009. IT project risks are further mitigated by utilising a proven project methodology for all IT projects that includes tight cost control and regular risk reviews for all major projects. In addition to these fundamental controls, the adidas Group has continued to focus on additional IT control initiatives in 2009. These include the development of a five-year IT Strategic Plan aligned with and approved by senior business management, as well as the periodic review and approval of IT project budgets by a governance board. A new team was formed within our IT organisation to manage all compliance-related activities, including the phased implementation of Segregation of Duties (SOD) controls within the ERP environment.
Based on these factors, we believe the risk of a major IT default continues to be low. Such a default, however, would result in a significant potential financial impact.