aetos-it products and services hawkeye monitor & apod

Block C, Castle Walk Corporate Park,

3 Kuiseb Street, Erasmuskloof,

Pretoria

www.aetos-it.co.za

AETOS-IT: PRODUCTS & SERVICES HAWKEYE MONITOR & APOD www.aetos-it.co.za

31 March 2015 Block C, Castle Walk Corporate Park, 3 Kuiseb Street, Erasmuskloof, Pretoria

T: 082 560 9134

of 22

BACKGROUND

1. AETOS-IT PROFILE......................................................................................................... 3

1.1 Cloud Solutions Audit of Human Capital....................................................................

1.2 Audit of Customer Relations via CRM Pipeliner and System Code via Hawkeye &

APOD...........................................................................................................................

1.3 Aetos-it Shareholders...................................................................................................

3

4

5

AGREEMENTS

2. AETOS-IT PARTNERS..................................................................................................... 6

2.1 EY.................................................................................................................................

2.2 Dimension Data............................................................................................................

2.3 Biotic Health Corporation............................................................................................

2.4 Matsei............................................................................................................................

2.5 Apace Systems……………………………………..…………………………………

2.6 InfoWatch………………………………..……………………………………………

6

6

6

6

7

7

PRODUCTS

3. AETOS-HAWKEYE MONITOR AND APOD..................................................................

3.1 AETOS-HAWKEYE Monitor severity classification..................................................

3.2 AETOS-HAWKEYE Monitor business risk................................................................

3.3 AETOS-HAWKEYE Features......................................................................................

3.4 Overall Health of the Custom Code Landscape…………………………….………..

ANNEXURES

Annexure A: AETOS-HAWKEYE Monitor and APOD Price List…………………….………..

8

8

9

10

14

22

TABLE OF CONTENTS



T: 082 560 9134

of 22

1. AETOS-IT PROFILE

AETOS-IT (Pty) Ltd Company Reg no: 2014/054899/07 emerged in January 2014 from the

amalgamation of several business solutions, into one company. The flagship business solution,

Hawkeye & APOD was launched in 2009 by the current owners of AETOS-IT. AETOS-IT is a

South Africa registered company whose main focus is the Audit of Technology systems, Audit of

Human capital and IT Consulting. We are the preferred supplier of Intelligent, Innovative &

Integrated Corporate Enterprise Solutions across South Africa and the rest of Africa.

1.1 Cloud Solutions Audit of Human Capital

1.1.1 Indaba Health & Wellness: Health and Behaviour Integrated Tool (HABIT)

An interactive, on line system, for behaviour modification with evidence based

monitoring. It combines Behaviour analysis with targeted e-learning and vital

statistic monitoring. It's an all-encompassing pro-active health and wellness

program for promoting health awareness. It teaches the participants precisely how

to modify their behaviour based on unique physical and behaviour tendencies. It

addresses the need for targeted health and wellness education through annual H&W

plans and personalised prevention plans. Evidence based monitoring is available

through a variety of sensing monitors of your choice and requirements. Encourages

compliance and verification of learning and progress. Can reduce insurance

underwriting costs and generate revenue for industry.

1.1.2 AETOS-IT / Profiles South Africa International

Aetos has a complete catalogue of state of the art occupational assessments that

target all phases of employment, from selection and hiring to training, self-

coaching and management of performance levels.

Profiles give Aetos-IT the market edge in areas of:

Recruitment & Selection,

Talent Management

Improving Workforce Productivity

Reducing Employee Theft & Fraud

Reducing Absenteeism

Improving Customer Service

Improving Call Centre Performance

Improving Sales Force Productivity

Reducing Voluntary Turnover

Doing more with fewer People

Manage Performance

BACKGROUND



T: 082 560 9134

of 22

Manage Organisational Change

Improving Morale

Improving Coaching & Monitoring

Succession Planning

Career Pathing

Helping Managers Succeed

Building High Performance Teams

Building a performance Culture

Building a Competency Model

1.2 Audit of Customer Relations via CRM Pipeliner and System Code via AETOS-

HAWKEYE & APOD

1.2.1 Client Relationship Management System Pipeliner

Aetos-It is proud to be the only distributer partner of the most innovative CRM

software solution (cloud) in South Africa. With Pipeliner CRM we introduced new

ways of looking at sales and at the sales pipeline by making it more visual and more

interactive. The interactive user interface allows sales professionals to manage their

most important data with just a few clicks of the mouse.

It gives minimum risk and secure business whilst focussing on the future successes

of the company. "What Amazon is for books Pipeliner is for sales". Pipeliner allows

us to capture, monitor and promote sales activities whilst being fully visible at all

times in the cloud. It integrates all sales activities with client’s relations and allows

the company to manage its sales goals as it affects income. Monitoring can be done

on individual or group sales activities. It has a clear and colourful sales pipeline

which integrates all sales activities on a dashboard with the click of a mouse.

1.2.2 System Code Audit and analyser- AETOS-HAWKEYE & APOD

Consulting is provided for the installation, configuration, interpretation of results,

training of users, project management and program correction/remediation

services. The principals of Aetos IT have been providing consulting services for

over 20 years in the information technology sector. With expertise in large scale

systems implementations and extensive experience managing programming teams

and software implementation projects Aetos IT is well positioned to provide

consulting services associated with the advice & products we sell.

Consulting - Product\Tools

This covers the setting up of the system and the setting of coding guidelines (the

rules) in consultation with the client. Pricing subject to clients requirements and

can be estimate for each landscape that the client requires scanning.



T: 082 560 9134

of 22

Consulting - Remedial work

This covers the placing of required skills to carry out remedial work. The cost of

consult depends on a variety of factors including the availability of the specific type

of resource required and the volume of work that is anticipated. It can take several

week or months to acquire the resources required depending on these factors.

Implementation Process

The implementation of the Aetos IT tools follows the path set out below. We

“Setup” the system by installing it for scanning, we “Scan” your code and we

“Validate and Configure”. At “Implementation” the system is up and running.

1.3 AETOS-IT Shareholders

The shareholders are:

Mr. Andrew Jansen van Vuuren - CEO of AETOS-IT (Pty) Ltd;

Mr. Rob Kading – IT Executive;

Mr. Collins Khumalo – Chairperson of AETOS-IT;

Mr. Jacob Ngakane – Professional engineer with expertise in manufacturing, mining and

development;

Mr. Emmanuel Christofides – Business Development Executive;

Mrs. Misti-Aletia Jonker – Corporate Executive;

Dr. Louis Powell – Health Advisor;

Mr. Lloyd Peter Chisholm – Financial Executive.



T: 082 560 9134

of 22

2. AETOS-IT PARTNERS

2.1 At EY, we are committed to building a better working world — with increased trust and

confidence in business, sustainable growth, development of talent in all its forms, and

greater collaboration. We want to build a better working world

through our own actions and by engaging with like-minded

organizations and individuals. This is our purpose — and why

we exist as an organization.

Strategic Alliance Agreement (effective 17 October 2014)

2.2 Dimension Data’s passion is to find ways to use ICT to make our clients’ business work

better. We turn your ambitions into achievements. We will position you to respond to

today's challenges, with targeted, pertinent services and IT

solutions. We ensure your business is supported by a robust

networking platform and help you optimise the performance

and availability of the unified communications and

collaboration tools that run on it – including desktop and

contact centre technologies.

Teaming Agreement (effective 27 January 2015)

2.3 Biotic Health Corporation is an impact-orientated company with the core objective of

promoting healthy lifestyles of consumers through managed health interventions. We

work with employers and communities together with the health

ecosystem to deliver tailored solutions that enhance the well-

being of individuals throughout Southern Africa. Our

interventions enable individuals to realise their full well-being

which translates into greater productivity, increased revenue,

reduced costs and increased morale in the workplace and

community.

Strategic Agreement (effective date 10 February 2015)

2.4 Matsei’s experience centres on the design, provision and effective implementation of IT

solutions into the Public Sector in general as well as specialising in solutions for both the

Military and Industry domains of the Aerospace and

Defence, Utilities, Telecommunication, Transportation,

Financial Resources and Health sectors. Matsei provide and

support a complete range of quality Enterprise -Business -

and Solution Architecture services, System Engineering,

Integration support as well as Data and Business Solution

(ERP, EAM, MRO and ECM solutions) Implementation

services. Strategic Partner Agreement (effective 25 October 2014)

AGREEMENTS



T: 082 560 9134

of 22

2.5 Apace Systems set out to create an independent switch that is fast, secure, open and easy

to use, and that could be used throughout anywhere in the world with no country-specific

restrictions while abiding by each country's local regulations

and requirements. Best practices were adhered to from the

start, which makes the system flexible to each client's needs

and the requirements of their country or regulatory body.

The apace switch is a type-agnostic switch that can handle

data across any industry and format. It provides multiple

connectivity options and abides by the highest forms of

security. Built as a completely pluggable interface it can

enable specific features as and when required. Transactions

can be processed in real-time, as batch or as a hybrid where

transactions are received as batch, but passed to the backend

as real-time.

Strategic Partner Agreement (effective 17 March 2015)

2.6 InfoWatch is a group of innovative technology companies focused on developing and

providing cutting-edge comprehensive technologies and services dedicated to Data Loss

Prevention & Protection, Intellectual Property Protection,

Customer Experience and Reputation Management, as well

as Risk Management and Compliance solutions. InfoWatch

products allow clients to reduce to a minimum the risks

associated with the processing, movement and storage of

information within the corporate secure area and outside it.

InfoWatch's integrated solutions not only protect

information, but automatically collect a body of evidence

that can be used in administrative and legal proceedings in

the event of a violation of the rules governing corporate

information assets by company employees.

Strategic Partner Agreement



T: 082 560 9134

of 22

3. AETOS-HAWKEYE MONITOR AND APOD

AETOS-HAWKEYE Monitor is the management oversight dashboard that is used to monitor code

development on a continuous basis. AETOS-HAWKEYE Monitor provides deep visibility of code

that violates best practices and AETOS-HAWKEYE gives management actionable and precise

results.

The scanning tool provides extensive analytical capability for targeted, effective and efficient

improvement in code quality. We provide tools that take a complex set off programs and look at

every line of code then help determine where there are issues and how those issues can be most

efficiently addressed. The scanning tool lets you penetrate the layers of your SAP/ERP code. Our

scanning software quickly reviews all custom lines of code and checks against more than 500 rules

for violations (in ABAP, Java, .Net or C++) and reports back on every line of code that violates

those rules via an easy-to-use dashboard that makes code transparent. This provides a snapshot of

any issues that reside in the corporate ERP programs.

3.1 AETOS-HAWKEYE Monitor severity classification

AETOS-HAWKEYE Monitor provides a severity classification of each rule according to

the degree of impact each rule could have on the organization – from a scale of 1 (most

impact) to 5 (least impact):

THE AETOS-IT SOLUTION

MONITOR THE DEVELOPMENT, QUALITY ASSURANCE & PRODUCTION SYSTEMS

PRODUCTS



T: 082 560 9134

of 22

S1: These rules will detect custom code known to cause issues in production.

Issues range from performance and security to data integrity and program stability.

S5: These rules represent violations of strongly recommended coding standards

that are seen as good software development practices. An example of an S5 violation is the

use of field names that are the same as SAP™ types, or obsolete language constructs.

3.2 AETOS-HAWKEYE Monitor business risk

AETOS-HAWKEYE Monitor provides an indication of the type of business risk

resulting from non-compliant code:

Stability - This refers to the degree to which the program is behaving predictably and reliably.

Issues impacting the stability of the system will cause abrupt halts, program dumps, or

technical error messages that are meaningless to a business user.

Maintainability - Rules about the maintainability of the system will detect issues that will

cause unnecessary expense when the system has to be transferred to new programming teams.

Unmaintainable code is poorly documented, may have hard coded values, or is using inline

macros that are difficult to debug.

Performance - Users expect programs to be stable and to respond quickly. Performance

issues will cause frustration in the business and undermine the value of the software. In

particular, where systems use shared resources (as in most ERP implementations) a poorly

performing object will have unintended consequences in unrelated parts of the organization.

Integrity - Programs may be efficient, and stable. But if database statements are poorly

designed, the results of the code may not be accurate. If return codes are not checked, the

program logic flow will not be predictable. Rules related to Data Integrity will focus on

detecting code that is known to cause unpredictable results.

Poor Practice - AETOS-HAWKEYE includes a number of rules intended to detect poorly

written code that may not result in the above business vulnerabilities, but is considered to be

obsolete, or un-recommended. Businesses with excessive code in this category will be

vulnerable to excessive time and effort spent on upgrades, or code that is hard to debug and

maintain.

Unpredictability - This is a broad category that deals with code that may behave different

than the programmer intended. Often times, it is just easy to do it a certain way without

knowing the consequence. Consequently, these statements are often (unknowingly) applied

inappropriately to the desired functionality and can result in disastrous outcome.

Every night, AETOS-HAWKEYE will apply rules to all custom code to detect any code that

is not compliant with corporate coding guidelines. Once the scan is completed, the results are

available online at www.hawkeyemonitor.com.

http://www.hawkeyemonitor.com/



T: 082 560 9134

of 22

3.3 AETOS-HAWKEYE Features

3.3.1 Navigating

The AETOS-HAWKEYE Monitor application is comprised of a collection of

gadgets – standalone graphical elements that provide insight into the state of the

programming languages being monitored by AETOS-HAWKEYE. The client can

logon to www.hawkeyemonitor.com with the supplied user-id and password to

access the application. After Login, the application is launched and a default page is

displayed that shows the Dashboard Tabs.

The top left of the window offers the user 2 default tabs that are pre-populated with

gadgets.

1. The tab named “COMPLIANCE MONITORING” provides a consolidated

snapshot of all issues for all systems being monitored. This provides a single

view of the ERP code footprint for all languages.

2. The tab Named “DAILY SCANNING” is delivered with a preset group of

gadgets that keeps track of incidents for the current development for a given

system.

3. AETOS-HAWKEYE Monitor provides capability to create personal

dashboards by clicking on the “+” button beside the dashboard tables and then

populating it with gadgets available from the Gallery. Right Mouse on the tab

enables delete or rename functionality.

4. The System under surveillance can be selected using this dropdown.



T: 082 560 9134

of 22

3.3.2 Tool Bar

On the Far Right side of the Window, there is a toolbar that offers several items:

DASHBOARDS—displays the Dashboard Panels

SEARCH— provides Query Search capability and Watch list Features

1. Search builder. Using this panel, you can create a search query that can be

saved or select a previously saved search for convenience.

2. To execute a search, build or select a search, load it into the gadget and press

“Run Search”.

3. Results of the search will be displayed in this table.

4. Results can be saved as a CSV file for future use.

GALLERY—gadget gallery to choose from



T: 082 560 9134

of 22

3.3.3 All Systems Consolidated View

1. This graph shows a consolidated business risk view of all systems being

scanned in one graph;

2. This is a FILTER that allows the user to choose incidents to show up in Graph

1 by Severity or Business Risk. Use the Eraser to Deselect All check boxes. To

Mass select a column or Business Risk, click on the item and all checkboxes in

that row or column will be selected;

3. This pie chart shows the Violation Density by System. In this example, the

ECC system has the highest (70 violations per 1,000 lines of code) violation

density count of all three systems;

4. This Pie Chart shows the Violation Density by Technology. In this example,

ABAP and Java code are being scanned and incidents reported for each

technology;

5. Radio Buttons allow the user to show the pie charts 1 and 2 by Severity Level

or by Business Risk Category. Roll over the shaded area in the pie charts to

display the category.



T: 082 560 9134

of 22

AETOS-HAWKEYE Monitor is continuously scanning all development every day.

The Daily Scanning Tab is a configurable Panel of gadgets that allows the user

to monitor the ongoing development of all development going on at the

company.

SETTINGS—Email, Business Filter Activation, Rule Configuration

LOGOUT—logout of application



T: 082 560 9134

of 22

3.4 Overall Health of the Custom Code Landscape

OVERVIEW

Through the automatic application of 500+ best practice patterns – both from SAP and built in-

house at AETOS-IT – millions of lines of code can be diagnosed for potential defects that could

cause harm to the business.

Incidents by Severity

The graphic depicts the number of

incidents detected. Severity levels can be

configured as required by customer.

Incidents by Business Risk

Rules are classified into business risk

areas. The categories apply to all

technologies supported by AETOS-IT

(ABAP, JAVA, C#, PLSQL). Upgrade

risks for the SAP product are shown in a

different gadget. The S1 and S2

incidents, in summary below.

Direct Table Updates – Possible Data Integrity Issue

Drilldown from this gadget (and from all

gadgets) expose the object/sub object and

line number of the location of the

violation.

If the practice of updating tables directly

continues, databases can become corrupt

and unrecoverable.



T: 082 560 9134

of 22

Rule Violations – All Violations

Drilldown from this panel will expose the

exact location in the code responsible for

the defect.

Filtering capabilities allow the user to

pick out only S1 items, or S1 items that

are rated as LOW effort and HIGH impact

(see next slide).

Summary of Rule Violations - S1, S2, Low Effort Violations

This view is with rule violations that are

LOW effort to fix. EFFORT and

IMPACT classifications are also

configurable by the user.

Rules classified as LOW EFFORT

indicate problems that can be resolved

immediately with no consequence to the

logic flow of a program.

Hard Coded Tokens

Hard coded values are dangerous artifacts

in production code, especially if the hard

coded tokens are business values prone to

change.

This gadget allows the user to create ad

hoc patterns as needed to find the hard

coded values in the code. Drilldowns

from each rule will expose the hard coded

token.



T: 082 560 9134

of 22

Obsolete Elements

In order to minimize upgrade risks,

AETOS-IT exposes all obsolete elements

in the source code. SAP’s built in rules are

leveraged to identify obsolete elements.

DESIGN ISSUES

In addition to coding guidelines, AETOS-IT also monitors design considerations like cyclomatic

complexity, nesting depth levels, and fan in/fan out.

Nesting Depth

Programs with a nesting depth greater

than 4 levels are suspect and should be

discouraged.

In this example, 4 procedures have IF-

THEN-ELSE statements that are nested

>12 levels deep.

Not only does this practice cause the code

to be next to impossible to understand, but

testing and QA processes become

needlessly more complicated.

Cyclomatic Complexity

Cyclomatic complexity measures the

number of paths through a piece of code.

AETOS-IT recommends a CC threshold

of 25 to ensure maintainability and test

case coverage.

In this example, 536 procedures have a

CC value of >80. Software with CC

values of 25 and over have been

demonstrated to have a higher probability

of defects and support requirements due

to bugs.



T: 082 560 9134

of 22

Code Size

Objects greater than 500 lines of code are

typically prone to high maintenance costs

and have a greater likelihood of defects.

In this example, 77 procedures were

detected with a code size of >3,500.

While it is sometimes difficult to

retroactively deal with this (and other

issues), AETOS-IT recommends a “0

tolerance” policy for new development

subsequent to a baseline date.

QUALITY ACCEPTANCE CRITERIA

In addition to coding guidelines, AETOS-IT provides an easy facility to set up corporate quality

guidelines.

Corporate Quality Criteria

In this case, for example, objects are

classified as “CLEAN UP”, “REBUILD”

or “KEEP” depending on the severity of

the issues. These classifications are user

configurable.

This profile represents the following

corporate acceptance criteria:

“zero tolerance” for any S1 violation

an expectation that documentation

levels will be >= 25% of the total

lines of code

no program will have decision trees

nested more than 5 deep

cyclomatic complexity will be <=

20

all programs will be less than 1,500

lines of code.



T: 082 560 9134

of 22

Transport Approval

By adding corporate approval rules for

transports, vendors or tech leads get a

continuous assessment of the quality of

transports.

In this case, transports are approved in

spite of some documentation issues.

Approval rules are configurable by admin

users.

By continuously exposing this report to

vendors, development teams can

proactively deal with rejected transports

prior to the release dates to eliminate

rework (and arguments).

WHERE TO INTERVENE

Once acceptance criteria have been implemented, our FAN reports will provide management

with input on where expensive resources should be applied.

FAN-IN

The size of these bubbles indicates the

number of lines of code. By plotting the

objects using the fan-in value against the

violation density, all objects in the NE

quadrant have a high fan-in value (beyond

a threshold of 20 in this case) and a

violation density of over 50 (per 1,000

lines of code) need to be assessed.

This is especially true if the bubbles are

red, as these objects have also failed

quality criteria set up for the company.

Drilling down from the object layer will

provide visibility at the program level.



T: 082 560 9134

of 22

FAN-OUT

Similar to FAN-IN, objects with a high

fan-out are prone to propagating errors

across the system and should also be

inspected for remediation.

In this example, there are several small

(bubble size) objects that have a

significant FAN-OUT value.

A manual inspection of these programs is

recommended to remove chances of

issues cascading to other parts of the

landscape.

FROM ASSESSMENT TO CONTINUOUS MONITORING

Corporations who wish to eliminate coding hazards from their landscape opt to set up a “0-

tolerance” paradigm to encourage all developers to consistently adhere to best practices. AETOS-

IT continuously monitors the development landscape and exposes issues as they are detected.

This provides management with the ability to intervene immediately and with precision. AETOS-

IT Monitor provides all the reports available in the ASSESSMENT product, but only for code

that has changed since the baseline date.

AETOS-IT Monitor

This graphic shows a view for each

system and progress towards “0 Defects”

over time. AETOS-IT can accommodate

multiple technologies on the same

dashboard.

In addition to the trend graphs, when

continuous monitoring is in effect,

sparklines in gadgets provide an at-a-

glance view of the trends.

AD HOC ALERTS – All hard coding violations

Users can set up ad hoc alerts to monitor

specific watch lists (developers, objects,

transports) over time.

Alerts can be set up to either display the

trends on the application, or to

automatically push the data to specified

users on the alert.



T: 082 560 9134

of 22

AD HOC ALERTS – System call







users on the alert.

AD HOC ALERTS – Nested loop







users on the alert.

AD HOC ALERTS – Access conditions without all keys







users on the alert.



T: 082 560 9134

of 22

PRODUCT OVERVIEW AND ROADMAP

The AETOS-IT Solution : Monitor the Delopment; Empower the Developers

Typical Implementation Steps

Validate & Configure

1. Configure severity ratings for all

rules.

2. Implement filters to remove

irrelevant objects from scan.

3. Spot check results against ABAP

code to ensure accuracy of the

scan results.

a. Direct table updates

b. Hard coded user IDs

c. CASE statement without

WHEN OTHERS

d. Database statements

inside loops

e. Breakpoints in the code



T: 082 560 9134

of 22

ANNEXURE A: AETOS-HAWKEYE MONITOR AND APOD PRICE LIST

SERVICE MONTH

1 2 - 12

Hawkeye : Diagnostic Scan & IT Audit Report R 75 000,00

Daily scan, APOD and Hawkeye monitor R 33 500,00

Senior Technology Consultant R 10 000,00 R 10 000,00

Total Cost per month R 85 000,00 R 43 500,00

TOTAL COST PER YEAR R 563 500,00

ANNEXURES

aetos-it products and services hawkeye monitor & apod

Documents

aetoshawkeye features

profile aetos

hawkeye apod

current owners of aetos

corporate park

business solutions

kuiseb street

block c