What do you like best?
Streamline the process of managing and validating user access to applications and data. With access governance solutions from SAP, you can automate provisioning and certify access, embed preventative policy checks, monitor and automate reviews of emergency access activity – and enable business owners to manage system access with minimal IT support.
What do you dislike?
Because it does not support scoping and prioritization of the audit universe, audit management is not scalable for a large internal audit organization. Some of the audit functionality requires the licensing and integration of the SAP BI Explorer.
improvements were needed in reporting, audit management and the CCM feature within Process Control
Recommendations to others considering the product
SAP GRC shares the leaders quadrant along with vendors BWise, IBM Open Pages, Thomson Reuters, Oracle and MetricStream. According to Gartner, SAP deserves that ranking based on a number of strategic and functional strengths:
Market understanding and strategy. SAP’s knowledge and understanding of the GRC market has increased, which is reflected in the way it is better able to meet basic compliance and risk assessment requirements, as well as the more advanced challenges such as calculating the effects of risk management on business performance and decision making.
Product strategy. SAP has integrated continuous controls monitoring (CCM) to enable a wider set of GRC capabilities.
Vertical/industry strategy. SAP now offers a version of GRC for Environment, Health and Safety (EH&S) and also works with a number of other vendors that provide industry-specific GRC applications.
What business problems are you solving with the product? What benefits have you realized?
lthough initially viewed as a technical upgrade, moving to GRC 10.0 allowed JTI and Turnkey to revisit the business requirements and identify opportunities to improve the system, whilst providing additional functionalities.
Project delivered on time and within budget
Internal expertise and self-sufficiency gained through working with Turnkey consultants
A time efficient and up to date new GRC system with custom automation
Improved user experience and internal compliance