Big4Guy

A lot has been talked about SAP's GRC application which automates the controls testing process for SAP customers. For any SOX compliance software to be successful, it is very important for it to take a risk based view of the business processes. Process documentation is another important area where SAP's GRC governance risk and compliance set of applications come out very strong. I had a quick overview of the functionalities within SAP GRC Process control and was quite impressed with what SAP has to offer in terms of sarbanes oxley control solutions.

SAP GRC works in a way that once all process documentation is complete, one can target key risks and the related controls and by testing automated, manual and other types of controls. So is SAP GRC live up to the hype. Yes, it definetly does. SAP GRC ensures that all enterprise governance is managed centrally and controls are linked to SAP GRC repository which ensure that all control components are taken into account. SAP also includes best practices from various frameworks like COSO and COBIT which get mapped to risks and controls. This sort of information in SAP GRC is very useful as it is helpful in analyzing control gaps and risks in the long run.

Related Posts

SOX Internal Controls Documentation
Role of Process Owners in SOX Compliance
Section 404 Best Practices
Indirect Company Level Controls