by Richard Hunt, Managing Director, and Marc Jackson, Consultant, Turnkey Consulting
GRC Expert - Volume 3 (2010), Update 9

Continuous controls monitoring (CCM) can help reduce compliance costs, strengthen the control environment, and reduce the risk of unintentional errors and fraud. Learn how using CCM in your GRC activities can improve business process operations in an efficient, cost-effective manner.

by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC
GRC Expert - Volume 3 (2010), Update 7

Too often, controls are managed using inadequate tools (e.g., point solutions, document repositories, and spreadsheets) that require too much manual tracking and updating. With SAP BusinessObjects Process Control 3.0, you can streamline issue identification and remediation with automated task notification and workflow-driven remediation plans.

by D. Russell Sloan, IBM Global Business Services, Implementation and Governance Specialist — SAP Solution Manager
GRC Expert - Volume 3 (2010), Update 7

With the advent of Sarbanes-Oxley and other compliance rules, the need for full traceability across a solution development effort is expanding far beyond just the pharmaceutical industry. SAP Solution Manager has a collection of features that enable your project to provide end-to-end visibility to all aspects of solution development and delivery. From initial design through final testing and signoff, SAP Solution Manager allows you to link and trace all the activities, documents, and technical objects needed to deliver your solution.

by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC
GRC Expert - Volume 3 (2010), Update 3

When different teams work with different procedures in different software solutions to address the many internal policies and external regulations to which a company is subject, it leads to inconsistent master data, unnecessary costs, and a lack of management visibility. SAP Business Objects Process Control 3.0 comes with a global master data catalogue and a multiple compliance framework to provide an efficient solution. It allows for managing compliance with respect to multiple regulations in a unified manner in a single system using shared master data. Learn more about how it works and how to set it up in the system.

by Judith M. Myerson, President/Owner
GRC Expert - Volume 2 (2009), Update 10

Follow four steps to help you identify, prioritize, and plan a data retention policy.

by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC
GRC Expert - Volume 2 (2009), Update 9

SAP BusinessObjects Access Control 5.3 can connect to the SAP NetWeaver Portal for automated user provisioning. Requesters can use the Compliant User Provisioning (CUP) product capability to request access to SAP NetWeaver Portal and select group memberships, portal roles, and User Management Engine (UME) roles. During the approval process, you can execute a risk analysis on the level of iViews and UME actions included in the requested roles to ensure Sarbanes-Oxley compliance with respect to the Web applications accessible through SAP NetWeaver Portal.

by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC
GRC Expert - Volume 2 (2009), Update 6

Efficient processes for identity management (IDM) are a challenge to many companies — in particular when access- and authorization-related risks must be managed and taken under consideration prior to provisioning access privileges. SAP BusinessObjects Access Control 5.3 comes with a Web service-based interface intended to provide risk analysis and mitigation features to IDM solutions. See how to integrate one such solution, SAP NetWeaver Identity Management 7.1, with SAP BusinessObjects Access Control 5.3 to obtain a highly cost-efficient solution for compliant IDM.

by Vivek Sadhale, Company Secretary and Head – Legal, Vikas Agarwal, Deputy Manager – Secretarial, Amit Atre, Assistant Officer - Secretarial, Persistent Systems Limited
GRC Expert - Volume 2 (2009), Update 3

Many parts of corporate governance codes are similar from country to country. The United States’ Sarbanes-Oxley Act is the most well-known code, and many countries’ efforts toward corporate governance resemble it. See how India and Singapore — two countries in much different socioeconomic climates than the US — handle corporate governance in comparison to the US.

by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC
GRC Expert - Volume 2 (2009), Update 2

Audit-proof your daily user management with SAP GRC Access Control’s Compliant User Provisioning capability. Learn about its main features and see an example of how to set it up for requesting, approving, and providing access to your business target systems.

by Suresh Veeraraghavan, Manager, Capgemini (January 2009)
SCM Expert - Volume 7 (2009), Update 1

Learn about purchase requisition workflow and using it to configure requisition approvals. See how you can set up some of the common business scenarios to implement controls for Sarbanes-Oxley compliance.