Soterion - GRC for SAP Reviews

Having implemented Soterion at several clients Soterion not only delivers at a technical reporting level but also provides GRC information in a Business Centric manner. This unique combination of technical and business level reporting has allowed our clients to make informed decisions regarding their Risks.

The support from the Soterion team is superb, whether responding to a technical consultant or a business manager their communication is always fast, friendly and informative. The Soterion team consistently go a step above for their clients.

The newer modules regarding Licensing, Data Privacy and Identity access provisioning are exciting additions that we are looking forward to using at our clients.

Having implemented Soterion at several clients Soterion not only delivers at a technical reporting level but also provides GRC information in a Business Centric manner. This unique combination of technical and business level reporting has allowed our clients to make informed decisions regarding their Risks.

The support from the Soterion team is superb, whether responding to a technical consultant or a business manager their communication is always fast, friendly and informative. The Soterion team consistently go a step above for their clients.

The newer modules regarding Licensing, Data Privacy and Identity access provisioning are exciting additions that we are looking forward to using at our clients.

Having implemented Soterion at several clients Soterion not only delivers at a technical reporting level but also provides GRC information in a Business Centric manner. This unique combination of technical and business level reporting has allowed our clients to make informed decisions regarding their Risks.

The support from the Soterion team is superb, whether responding to a technical consultant or a business manager their communication is always fast, friendly and informative. The Soterion team consistently go a step above for their clients.

The newer modules regarding Licensing, Data Privacy and Identity access provisioning are exciting additions that we are looking forward to using at our clients.

Soterion provides all SAP Security in an easy, understandable format that facilitates the entire Access Management process. Super fast support when needed and a great modern user interface.

If we have to come up with a downside it is that we are looking for some more Identity Access Management functions, specifically provisioning to non-SAP systems.

It provides information in such a way that our Business users can perform their SAP tasks more effectively. Activities like the User Access Review has become easy to do.

We've used Soterion for the past 6-7 years to manage our segregation of duties requirements across our SAP solution. The tool is great to use and it works well for us. If we do have any challenges we know the Soterion team is only a quick call away and the support and service they provide is unparalled.

There's nothing to dislike about the product but I dislike the fact that the Soterion toolkit has a lot more to offer than what we use today. We'll make it happen someday soon as if the rest of the toolkit is as good as what we are currently using then we are on to a winner,

Soterion really enables us to not only manage our segregation of duties requirements in our SAP solution but to manage them well.

Soterion is a highly effective and easy-to-use GRC tool. The reporting is immaculate and identifying SAP access risk from a user, single role, composite role, business role and position level is a breeze. The reports are also very rich in information and hence provide all the visibility you need to clean up your SAP access risk. My favorite part of the Soterion tool is how seamlessly it converts the technical GRC language into a language that business users can understand through visual representations amongst other things.

There is honestly no downside to using the Soterion tool. If you want an effective, easy-to-use and agile GRC tool Soterion is the way to go!

One of the most important tasks of an SAP Security consultant is cleaning up SoD and Sensitive access risks. Soterion is exceptionally good at identifying the risks and providing different reports to, for example, focus on the highest contributing users and/or roles first. This enabled me to dedicate my time effectively and ultimately led to a more effective clean-up. Soterion is also able to report on superfluous access i.e. transactions and roles that are not being utilized by SAP users and thus made my life easier by removing risk-bearing access without business interruption.

Soterion is very intuitive it doesn't take long to familiarise yourself with the interface and how to use it, even for non sap users.

Unfortunately it doesn't work on non-SAP yet as we would like to roll it out to other software platforms as well

It provides insight into risk and allows you to quickly mitigate that risk, and additionally it allows you to easily demonstrate to auditors what steps you have undertaken to comply to best practice.

The team at Soterion are the loveliest people to work with, super helpful and quick responses to any questions. Soterion makes a lot of regular tasks in SAP security a breeze

There are so many functions available within Soterion, I do feel we are still under-utilizing it which we need to spend more time on. But I know the team are always happy to show us how to use anything when we have questions

The major benefit is easily managing risk and segregation of duties for our SAP security team, this work would be incredibly time consuming to manage manually without Soterion

Easy reporting tools that is easy for non-technical users to interpret

This has allowed us to feel more in control of our SAP system, which we would not have otherwise had visibility into as this would be handled only by our outsourced support team

Implementing Soterion has helped us feel more in control of our SAP system including:

a) provisioning of elevated access and reviewing what changes have been made during the period of their activity

b) being able to analyse which users are active in the system and roles assigned

c) segregation of duty risks that exist in the system

We have formed good relationships with the Soterion team. The support that we have received from the team has been excellent – responses have been very prompt and detailed solutions that are easy to understand for non technical users

Nothing that we dislike, any opportunities that we identify for change, the team has been supportive to help us with.

Providing us more control and visibility into the users/ roles/ elevated activity assigned and performed in the SAP system.

Soterion has also provided us an opportunity to save costs through reports already available in the system that were previously run by Auditors every year end

The simple and friendly GUI is the best. Implementation is fast and simple, this is a business solution with strong IT ease of use and maintenance.

It works on SAP, that is the focus and strength. It supports SucessFactors, but not (yet) other non-SAP solutions. So a must-use in your SAP domain, but only SAP.

Soterion is a solution for the business, it builds the bridge between IT authorizations and license contract details and makes this easy visible to the business.

It is really easy to use and gives lots of insight into the access risks on my system

No problems found with the solution. All works well

Giving me and the users in the business visibility of risk and enabling us to reduce that risk quickly and easily

The speed of the support is very fast, also feature requests are adapted in reasonable time

Nothing for now, everything is working as expected

The GUI is user-friendly and easy to use for all levels of users