SAP GRC Reviews

SAP GRC is a tool I use for batch management compliance and to supervise the status of reconciliation, batch release or hold,

It can be used for governance. It lowers the cost of compliance to our company and help in audit process smoothness. Also it help in process control.

Everything is good but it is hell slow sometimes requiring more space and RAM.

This will make it more time consuming.

Sometimes it is also got hanged and delayed response. Transactions respond delayed sometimes.

I use it to relesse batches, for governance and batch management.

I can supervise the reconciliation status of items and Material receipt notes of the products.

I use it to manage the Transfer tickets of the batches which are released.

I like the fact that the name of GRC completely represents what it does. Basically everything from compliance management for a company to their process control and risk management, including access management for end users.

Overall the product is great, with many capabilities!

The only fact that I dislike about it is the slowness.

I have used GRC numerous times and this slowness is one thing that takes the beauty one notch down.

I have used GRC solutions to enable my clients get their risk and access management in place. Before using GRC, the risk management was actually a manual task. However, since we started using GRC for risk management, the world changed! It automatically lets you monitor the risks and informs you if we are in SoD violation.

GRC provides a complete package to manage any organisation's risk and compliance management(as the name suggests)

With the new GRC 12.0, it has now integrations with many of the cloud applications!

As such it is a great tool. But I never got the idea as to why they are not building an application for it. Whenever we want to run GRC, it automatically opens up in a browser.

I feel there should be an app for it.

I have used it in multiple projects to solve our clients access management, access risk analysis, business role management and emergency access management needs.

SAP is more useful in data recording process. useful for any pharma organization.

its very usefull but during Annual maintiance work stop.

Its very helping in dispensing to dispatch process.. Material issuing. return, and receving.

It helps in below:

1 - Risks between 2 or more critical functions

2 -Controls design and mitigations

3 -Continous monitoring and compliance standards

4 - Checks conflicts

UI could be improved better & more inbuilt risks can be included in the rule set.

The risks and conflicts are been identified and eliminated or mitigated

For AUDIT there are excellent reports available.

Compliance and Security wrt business is maintained.

GRC is the core security tool for SAP. When SAP evolves in module for all possible business scenarios, security is also the essential thing to keep the system stable. So in this way, GRC is the tool that gives end-to-end security to data and user authorization. It keeps track of all the transactions users are using regardless of time and place.

Through GRC, we can restrict, control, monitor, and manage the user's usage. Let's say if the user is from the Sales team, he will only have authorization for all Sales and Distribution related transactions, even if the user changes some data that will also logged in the system. so that we can have a track, manage and monitor once usage in SAP. This is one of the powerful security Tool.

There is nothing to dislike because SAP has already provided that are needed for security. Even if we need any custom thing for the business, we can built the tool on our own else, we can reach out to SAP for our requirement, and they will get our needs and solve our business problem.

As for as I haven't faced any issues with SAP GRC, we will face issues only when the requirement is redundant or improper. If the business scenario is clear anyone(SAP Technical) can build the custom objects and deliver.

Consistency, and reliability of control performance.

Issue found after upgrade of front end or back end system when some systems having old GRC component.

Modify, request roles , hiring or termination all in single system more over to eliminate any risks in entire landscape.

It comes with pre approved roles by management

As of now nothing. The approval process is good now.

It's more easy and smooth and more efficient.

Compliance issues and more of controlling the risk in our sap systems more efficiently.

I love the interface of the companies portal.

I dislike that it is very black and white, and offers very little customer satisfaction and support.

Perhaps offer 24/7 support for business.

Problems: Very expensive implementation costs.

Benefits: Easy to use.

This software is great to have a centralized operation of all users and authorizations in SAP systems, you can have many kind of SAP system, managed by SAP GRC and control what users do and how.

Sometimes sap grc can become a bit slow if the implementation wasn't good enough, if you don't have last level of support packages, you can find some bugs that make slow the administration.

This will help your company to manage all users system and authorizations centralized and it will do your administration job easier and faster, will have the oportunity to change the sap roles and add new features faster than doing it on each system at all.

This is great for manage a large ammount of SAP systems that i'm working with, it give me perfect access control and administration of users, also i can change new roles or modify it, all in one grc system, don't need to log in at any other system. You can do it faster, with automatic sync using sap jobs, this will make your systems homogenus and you can have sure that all users monitorized.