www.pwc.

com/sap

SAP GRC Risk Management overview

PwC Consulting Services

SAP GRC Risk Management

In the environment of a volatile global economy, increased regulation, and tightened budgets, its more critical than ever for organizations to identify and understand business risks. Until recently, however, businesses have typically taken a narrow, compliancefocused approach to risk management thats reactive rather than proactive. Without a broader risk management philosophy one that aligns with the overall business vision and mission your organization can face challenges such as: Risk management viewed as a compliance exercise Siloed risk management processes, leading to duplicate efforts among business units Inconsistent processes and unclear roles and responsibilities, leading to gaps in risk activities Risk management that is not anchored in sound enterprise-wide technology systems, leading to inefficiency and increased costs Risk management programs that fall short by stopping at risk assessments, standalone programs, or conceptual frameworks Risk management disconnected from business objectives and, consequently, performance management To create a successful risk management program, organizations need a common vision for how risk ownership fits into routine business activities, embedding risk management into the core business processes of strategic planning, execution, monitoring, and analysis. This means that risk management should be established as a management discipline and should include the methods and processes to identify, assess, measure, and monitor risks within the business.

Business drivers for SAP GRC Risk Management

Transform Risk Management process from a silo approach to a more coordinated and oriented approach. Consolidate risks at higher levels of the organization and evaluate global risk exposure. Respond intelligently by focusing on key risks, creating cross-organizational resolution strategies, and tracking response costs. Improve visibility and optimize decision making by aligning risks to strategic priorities and business objectives (enhance risk communications to the board). Monitor key risks in a proactive way through a standardized and centralized Key Risk Indicator framework.

Solutions from an experienced leader

You don't have to be riled by risk. PwC has the experience and know-how to understand the unique problems your business faces and help you roll out the SAP GRC Risk Management solution across the organization. We'll tailor a solution to tame your risk management processes and streamline cross-enterprise risk identification, analysis, and monitoring. We take a systematic approach, using incremental steps to help you develop and adopt a robust and sustainable risk management program aligned with leading practices across your organization. Weve designed our Accelerated SAP GRC Risk Management implementation program (AccelerateRM) to give functional leads quick insight into SAP GRC Risk Management key functionalities and to empower core team members throughout the project by incorporating specific learning into a full-scale roll-out plan. And by leveraging knowledge and lessons learned across other SAP GRC projects, our unique Center of Excellence team can assist you throughout the implementation life cycle by providing a wide range of accelerators to facilitate project success.

A sustainable, forward-looking Risk Management program

PwC can help your organization shape its existing and ongoing risk management processes into the SAP GRC Risk Management solution and derive value in key four areas: Streamline risk management Develop end-to-end risk processes across the value chain Plan and agree on top risks and appetite across the organization Understand true exposure resulting from risk analysis and correlation Create resolution strategies for critical risks Build proactive monitoring into existing processes Reduce costs Lower administrative cost for risk management through automation Preventive risk responses through Key Risk Indicators Track response cost and efficiently assess Net Impact of Response Increase visibility Improve visibility of risk exposure across the organization Gain clear insight into risk and compliance activities across the enterprise Drive accountability and actions through transparent and timely reporting Enhance decision making with informed, risk-based information Manage change Drive business change through risk-adjusted management Align and leverage risk and assurance objectives during times of change Provide management with insights as the business executes its strategy Highlight trends and changes in risk level

About PwC
PwC provides industry-focused assurance, tax and advisory services to build public trust and enhance value for our clients and their stakeholders. More than 161,000 people in 154 countries across our network share their thinking, experience and solutions to develop fresh perspectives and practical advice.

KEY CONTACTS:

Robert H. Clark Philadelphia (267) 330-2497 robert.h.clark@us.pwc.com Elizabeth McNichol Philadelphia (267) 330-1456 elizabeth.f.mcnichol@us.pwc.com

2011 PricewaterhouseCoopers LLP. All rights reserved. In this document, PwC refers to PricewaterhouseCoopers LLP, which is a member firm of PricewaterhouseCoopers International Limited, each member firm of which is a separate legal entity. This document is for general information purposes only, and should not be used as a substitute for consultation with professional advisors.