Скачать или смотреть A Holistic View for Effective Access Risk Management

Soterion CEO, Dudley Cartwright explains what Soterion believes is needed for effective GRC and what is meant by effective GRC.

Many companies make the mistake of thinking that the GRC or access control solution alone is the silver bullet to solve all their SAP security challenges. And because of this many organisations have an access control solution, but it is not adding much value. These companies have GRC, but it is not effective.

When measuring your organisation’s GRC effectiveness, it is important to measure this in relation to the organisation’s business objectives.

• How secure is your SAP solution?
• Are you complying with regulations, in particular the data privacy regulations?
• How efficient are the SAP security processes - these include provisioning of access, SAP security support and business’s compliance tasks such as a User Access Review?
• Have the business taken accountability of access risks?

It is very difficult to address these business objectives without a holistic view of GRC. You need to look further than just the GRC solution, and look at all the associated components collectively and understand their inter-relationship. To illustrate this, we will use what we call the effective GRC pyramid.

Dudley explains the Effective GRC Pyramid in more detail in the video.

Your entire GRC effectiveness will be measured by how well the business carries out these functions. Don't under-estimate the importance of choosing a GRC solution that addresses your business objectives. If enhancing business accountability of access risk is one of them, ensure that you implement a business-centric GRC solution. And lastly, don’t make the mistake of thinking that the GRC solution is the silver bullet to all your GRC and SAP security challenges. View your GRC holistically and ensure that all the components of the GRC pyramid are working effectively together.

Soterion's GRC modules include:
Access Risk Manager
Basis Review Manager
Central Identity Manager
Data Privacy Manager
Elevated Rights Manager
Periodic Review Manager
Password Self-Service
SAP License Manager

Deployment options are as a subscription model or an outright purchase:
• Soterion On-Premise: For customers looking for market leading on-premise access risk software.
• Soterion Cloud: Soterion’s GRC suite hosted in Soterion’s data centres.
• Soterion GRC as a Managed Service: For customers looking to combine ‘on-tap’ GRC expertise with Soterion’s GRC suite.

#Soterion #GRC #GRCforSAP #SAPSecurity #GovernanceRiskCompliance #AccessRisk #GRCsoftware #GRCsolutions #GRCtoolsforSAP #GRCtools #GRCsoftwareforSAP #BusinessCentricGRC

Visit our website: https://soterion.com/

Contact us via email: [email protected]

Connect with us on social media:
LinkedIn -   / 2170119  
Twitter -   / soteriontech