Sie sind auf Seite 1von 8

Maximising the real value of SAP GRC

RouteONE SAP GRC


Access Control

C
A

Contents
Business context:
Governance, risk and compliance
Implementation:
A challenge in itself
Integrc:
Innovative thinking for an advanced approach
RouteONE:
The faster, better, more affordable option
RouteONE:
For Access Control
Access Control:
RouteONE Toolkit

ROUTEONE SAP GRC ACCESS CONTROL

ACCESS contro

Governance, risk
and compliance (GRC)

SAP GRC
Access Control

Effective management of risk is not only a

As well as replacing manual GRC processes,

regulatory requirement, but is increasingly

Access Control offers real-time visibility

seen as a crucial element in enhancing

into your risk position, minimises

ACCESS contro

performance and driving competitive

unauthorised access and fraud, and reduces the overall

advantage however it can appear a complex

cost of compliance.

and demanding challenge. During a recent


survey of companies that run SAP as their core

Key features

ERP system, 75% of respondents expressed


a desire to improve their management of
governance, risk and compliance (GRC) across

Automatically detect and remediate access risk

their business.i

violations across SAP and non-SAP systems

As audits become more stringent and demands for

Embed compliance checks and mandatory risk

compliance grow, organisations that take security and

mitigation into business processes

compliance seriously know that they must put in place

Empower users with self-service, workflow-

integrated systems to manage GRC. Often this means

driven access requests and approvals

transitioning from manual risk management processes


and spreadsheets to an automated solution, and for

Automate reviews of user access, role

many SAP users the implementation of SAPs GRC suite

authorisations, risk violations and control

starts with the Access Control module.

assignments
Better manage superuser access controls
with a centralised, closed-loop process

A challenge in itself

Create a comprehensive audit trail of user


and role management activities

Once your organisation has decided to move forward


with SAP Access Control, the next challenge is the
implementation process. Different businesses have

Annual GRC Performance Survey 2013, Integrc, September 2013.

different requirements, and with multiple stakeholders


bringing their demands to the table, traditional
implementations can become time-consuming,
disruptive to operations and expensive to run. There are
various rapid deployment options available to expedite
the transition, but using a template-style process will
usually only deliver a standard, vanilla solution that falls
short in meeting your specific requirements. Such an
approach often results in a system that isnt accepted by
the end users it was chosen for in the first place.

Access Control
3rd floor

ROUTEONE SAP GRC ACCESS CONTROL

Innovative thinking
for an advanced
approach

The faster, better,


more affordable
option

Integrc is a specialist GRC consultancy. We work

Offering a much faster route to the tailored solution

globally with organisations that run SAP to help them

youre looking for, RouteONE from Integrc combines

turn their GRC strategy into reality. Our 80 highly

a robust yet streamlined methodology with advanced

experienced GRC experts are continually striving to

automated tools and an extensive library of prebuilt,

find new ways to make life easier for our clients and

best practice content. RouteONE enables us to

to raise the quality standards of GRC delivery.


We also invest heavily in our award-winning
Innovation Team who are focused on breaking the
boundaries of conventional thinking for the industry.

automate many deployment tasks and therefore focus


more time on real value-added activities. This includes
a continual emphasis on benefits realisation and on
ensuring your business users embrace the new
system. Built into the RouteONE approach is our

To address the difficulties often associated with

Engaging Risk methodology and portfolio of fresh,

deploying GRC, we challenged the Innovation Team

elegant technologies such as mobile apps and

to completely rethink the process from end-to-end,


with the ultimate aim of developing a completely new
approach. Not satisfied with minor improvements

dashboards. Engaging Risk creates a more engaging


user experience, which leads to greater adoption and
therefore better outcomes.

and tweaks, we channelled all the knowledge and

Available for a range of SAP GRC solutions, not just

experience of our experts, along with the lessons learnt

Access Controls, RouteONE removes many of the

from over 300 successful projects, into finding the

obstacles to a smooth GRC implementation project.

optimum way of implementing SAP GRC. And once it

Instead of manually configuring the solution for your

had been developed, trialled, tested under laboratory

company, or forcing your organisation to fit a standard

conditions and applied across a range of scenarios,

template, RouteONE maps out a strategy based on

we then searched for a transformational method of


achieving the same outcome, but in half the time.
The result is RouteONE.

proven implementation projects, then customises


it specifically for you. RouteONE can even show
you a draft version of your system, using available
content and defaults, within 24 hours of project
commencement to give you the unique benefit of
hindsight in advance. The detailed design blueprint
approach of RouteONE also enables the automation

Impact of RouteONE for SAP GRC Access Controls


bespoke implementation

of several elements of the process, saving time and


money, and improving accuracy for a better overall

Go-live & Support

outcome.

Realisation & Test


Blueprint

Time Frame

Project Prep

A genuine breakthrough in deployment, RouteONE


is now the foundation for all our projects, equipping
our skilled and experienced consultants with the most
advanced toolkit in the industry enabling them to
deliver better results on every project.

Before

Now

ROUTEONE SAP GRC ACCESS CONTROL

Integrcs experience has been


channelled into

80

In-depth

knowledge

highly-experienced
GRC practitioners

of GRC best practice

500

Experience
in running GRC
operations and
support

Over

300

man-years of 
experience

successful
GRC projects

IMPLEMENT AND OPERATE TOOLKIT

QuickBuilder
Engine

GRC
Content

Tools, U li es
and Accelerators

Ensure your soluon is built


and configured to your
requirements in the shortest
me possible.

Ulises knowledge from past


projects, combined with the
latest thinking, to provide
comprehensive content.

Minimise the manual tasks


involved in deployment, such as
data entry and tesng, to save
me and increase accuracy.

Equally effecve at configuring


complex customised soluons
as standard opons.

Excellent prebuilt material enables


you to get more complete
outcomes more quickly.

Reduce the required tesng and


validaon mes as a result.

Enable rapid deployment with


correct results first me.

Connuously improving as Integrc


encounters further concepts,
experiences and best pracce.

Analyse current situaons to


ensure opmum change projects
are scoped correctly.

ROUTEONE SAP GRC ACCESS CONTROL

ACCESS
control
For Access Control
The RouteONE methodology enables you

ACCESS control

to successfully deploy SAP GRC Access


Control in a much-reduced timeframe,

while also saving costs and improving the end result.

Key benefits
Better:

Faster:

A tailored solution that does not compromise

Rapid yet reliable methodology to reach go-live

on specific business requirements and is

quicker - usually half the time it would take a

focused on realising benefits

more traditional approach

Engaging risk expertise, training and


consumer-like interfaces to help ensure
end-user adoption and innovation

More affordable:
Savings typically as high as 50% of the total

Greater accuracy through automated

cost of deployment

data entry
Fixed scope and fixed price agreed upfront to
A guaranteed go-live date

remove the risk of running over budget

ROUTEONE SAP GRC ACCESS CONTROL

RouteONE Toolkit

QuickBuilder
Engine

SAP GRC
Access
Control

RouteOne for
Access Control

GRC Content

Tools, Utilities and


Accelerators

Integrated SAP+ SoD Rule Set

Mitigating Control and


Firefighter

Mitigating Control Library


Test Scripts
Dashboards

The RouteONE methodology is available to


implement SAP Access Control, SAP Process Control,
SAP Risk Management and Security for SAP.

Master Data Uploader


Transaction Data Uploader

Why Integrc?
For companies running SAP who take security and GRC
seriously, Integrc is the GRC specialist with the experience
and innovation to turn strategy into reality.
Integrc provides GRC services, from small enhancements
to large and complex roll-outs, for organisations running
SAP. We specialise in the full lifecycle of GRC consultancy
and support services. This includes audit, strategy and
planning, implementation, operational control and fully
managed services.
We do all this for many of the worlds leading
organisations. We can do the same for you.

Visit our website


www.integrc.com
Integrc, operating
globally from bases in
the UK, Netherlands,
MENA and India