How SAP helps GRC

[Former Member]

It is nice to have GRC here.

Governance deals with the ethical corporate practices,thus to remain true and fair to the stake holders,besides maximizing the value.As the stakes of public is very high,the Governance seeks to render transparency here.

Risk is the probability of a threat that can endanger an onganization.The Enterprise Risk Management ensures that the business of the organization continues devoid of loss,disaster,etc.

Compliance embark upon the fiduciary issues.Most of the enforcing regulatory measures likeSOX,HIPAA etc ensure that the managers have embarked upon the best practices in the pursuit of the goals.

These three complement each other and some times overlap.For example,there can't be a good compliance without a good governance.The Governance is not complete without a proper risk management.These three,viz,Governance,Risk,Compliance are in fact,the strands of the same thread.

Needless to mention,IT plays a huge role in the above mentioned areas.ERP like SAP R3 in tandem with specialized tools such as MIC,SEM comes handy here.

In this context,i would like to know rather examine how effectively SAP can address these issues.

I invite views,ideas and suggestions.

Regards,

Ramesh.

[Former Member]

Hello Ramesh,

SAP MIC is the solution we are using for SOX Compliance. Could you comment about its Integration with third-party applications, por example: ACL or SAP Compliance Calibrator?

Regards,

Perla Silva Zermeñ

[Former Member]

Hi Perla Silva Zermeño ,

This will seamlessly integrate with 3rd party tools like approva,Virsa .In fact most of the tools have a ready made interface with almost all of the standard ERPs.In addition they have SDK to interface with the non-std ones.

hope this helps.

Why not you share your sox experience?

regards,

Ramesh

[Former Member]

Hi Ramesh,

We’ve been documenting for SOX Compliance on MIC with great success, in 2005 as a test and 2006 for certification. Also in this past year, through Virsa, all user violations were either solved or mitigated. Now we are inquiring how other MIC functionalities can be helpful and reduce time consuming procedures.

Were can I find information about how to activate the interface between this components?

Actually, there are two MIC installations one for SOX Compliance and another for Internal Control’s monthly assessments. We are exploring the possibility of homologating the process into one installation and also incorporating xApp Analytics for a swifter overview of progress and results for users.

If there is any recommendation with a similar experience, it will be very helpful and interesting to hear about.

Regards,

Perla

[Former Member]

Hi Perla,

For MIC,am not aware of any useful doc.I understand in SAP help,there were building blocks.For some strange reasons SAP has removed this.So this area without any proper guide is a challenge.I sincerely feel that SAP should address to this need.

I request the SAP fraternity to help us here.

Regards,

Ramesh

[Former Member]

Hi Perla,

Please check SAP Business Community where similar discussion is going on:e.g.:

http://www.sap.com/community/int/innovation/governance/forum/ShowPost.epx?PostID=355336

More info on GRC:

http://www.sap.com/community/pub/innovation/governance/webcasts.epx

Posting your queries directly to SAP Service Marketplace is a good idea.

Ramesh: Let us share more on GRC.

Thx & Rgds

Sudhanshu

Message was edited by:

Sudhanshu Shekhar Tiwary

[Former Member]

Hi Sudhanshu/ Ramesh,

I will follow up this topic in SAP Business Community's discussion.

Thanks!

Regards,

Perla