SAP GRC offers a full range of functionality to ensure governance, risk management and compliance is implemented and assured across the Enterprise. As a comprehensive solution, fully integrated in your existing SAP, Oracle, JD Edwards or other ERP system or as a stand-alone solution, it manages your user access, controls and monitors your business operations and actively warns you in case of possible or potential thefts, frauds or other critical risks to your business.

It enables also monitoring of risks, global, strategic, operational or technical and IT based and also gives you full control and visibility of any sanctioned parties, goods requiring import or export licenses considering requirements like US-IFTAR, EU-REACH, NAFTA etc. Below please find a short overview:

 

Access control

With this module, you will save significant effort and reduce risks when creating, maintaining and retiring users and automatically assign correct authorization in all related systems. The integrated workflow assures approval by respective business line managers and an fully automated risk analysis will alert you in case of any critical combination of authorisations assigned to the user. The optional full integration with HR and automatic role assignment will save even more effort for your system administration.

Process control

Your ongoing, operational business processes and transactions will be monitored by the Process Control Module. This checks for every business transaction if any rule you defined is being violated, if any potential risk of theft or fraud occurs and will proactively warn you in case of any problems or risks and all activities and incidents are documented and can be audited at any time. This Module also ensures full compliance with international standards and requirements, like SOX, Basel II etc.

Risk Management

The Risk Management module us used to identify, analyse, mitigate and respond to any risks occurring for your business and operations. These may be global, strategic, operational or technical/IT risks. Risks can be classified in detail and assigned to specific companies within your organizational structure and a workflow ensures review of risks with the options to accept or respond to a risk.

Global Trade Services

This module ensures your compliance in terms of international customs regulations, consisting of export management, import management, trade preferences management and Restitution Management. This module can receive data from SAP, Oracle or any other ERP system and includes monitoring of sanctioned party lists, US-ITAR, EU-REACH, NAFTA preferences, nested licenses, duty calculations and fully automated customs declarations based on transactions in your ERP systems.