GRC Expert

Approvals on the Go: How to Leverage Mobile Devices for GRC

Thu, 2 Feb 2012 12:11:01 EST

Today�s business world is moving faster than ever. Approval bottlenecks cost companies money by delaying the ability to address critical business requirements. These bottlenecks include access approvals. The SAP GRC Access Approver application improves the speed at which employees can gain access to systems they need to complete their jobs. Learn how to use this mobile application to manage access requests in your environment.

Spotlight: Implementing SAP BusinessObjects GRC 10.0 Solutions

Wed, 25 Jan 2012 10:25:09 EST

SAP�s Frank Rambo comments on guidelines to follow and pitfalls to avoid when implementing SAP BusinessObjects GRC 10.0 solutions.

Strategies to Leverage an SAP System Implementation for Reduced Cost of Compliance

Wed, 11 Jan 2012 12:00:04 EST

Be sure your internal control structure is adequately designed during an SAP system implementation or upgrade. It can be expensive to redo this structure after the designed processes are in place, as an SAP system implementation is a major transformational activity involving organization-wide process changes.

A Guide for Using Three-Way Match Invoice Control over a P2P Process

Mon, 19 Dec 2011 13:41:14 EST

Learn how to measure and assess whether three-way match invoice control has been effectively implemented � in terms of security, segregation of duties (SoD), and processes � to reduce the risk of fraud and monetary losses over the procure-to-pay (P2P) process.

Use SAP Acquisition Tax Accrual to Meet VAT Declaration Requirements

Tue, 6 Dec 2011 10:10:39 EST

In a few European Union (EU) countries, companies receiving goods without an invoice receipt must make an acquisition tax accrual and include it in a value-added tax (VAT) declaration to be able to comply with legal reporting requirements. The goods must have been shipped from other EU countries. Discover how SAP�s acquisition tax accrual functionality expedites this process.

Manage Multiple Access Requests Efficiently with SAP BusinessObjects Access Control 10.0

Tue, 22 Nov 2011 17:30:21 EST

One of the key advantages of SAP BusinessObjects Access Control 10.0 is the multiuser access request feature. With this feature, multiple user access requests can be combined into a single request to save time and effort. This feature was available in SAP BusinessObjects Access Control 5.3�s compliant user provisioning functionality, but it had limited capabilities. Learn about how SAP has enhanced multiuser request submission in SAP BusinessObjects Access Control 10.0. You can use SAP BusinessObjects Access Control 10.0 for multiuser request submissions during go-live or to provide the same roles to numerous SAP users.

Manage NAFTA Trade Preference to Mitigate Risk with SAP BusinessObjects Global Trade Services

Fri, 18 Nov 2011 10:10:06 EST

In growing globalization, free trade agreements provide a comparative advantage for companies engaged with business within a specific trade zone. Implementation of the North American Free Trade Agreement (NAFTA) with SAP BusinessObjects Global Trade Services creates a combined solution to mitigate risk, better manage the process life cycle, and automatically deliver NAFTA certificates to customers.

Turn Emergency Access Management into an Auditable, Centralized Process for Your SAP Landscape

Mon, 7 Nov 2011 12:49:13 EST

SAP BusinessObjects Access Control 10.0 centralizes what has traditionally been the disparate process of administering exception-based access. In the past administrators maintained firefighter, owner, and supervisor assignments locally in each system, and business users initiated firefighter sessions in these systems. In version 10.0, however, the process of maintenance and initialization of firefighter sessions is done from the SAP BusinessObjects GRC platform. Additionally, a new workflow provides an auditable process for ensuring that supervisors review the new consolidated log reports following firefighter activity. Examine how log reports are augmented, providing a more complete tracking of firefighter activity. Learn how to use new features available with version 10.0 adding significant value around your emergency access management process.

Manage Global Trade Restitution Laws and Demands Using SAP BusinessObjects Global Trade Services 8.0

Fri, 14 Oct 2011 12:41:05 EST

Learn how SAP BusinessObjects Global Trade Services handles the restitution process in the European Union. Understand how to configure restitution functionality in SAP BusinessObjects Global Trade Services 8.0 through a step-by-step configuration checklist.

Due Diligence in M&A Transaction: How SAP Helps Mitigate Risks

Mon, 10 Oct 2011 11:39:59 EST

Due diligence is a key step during mergers and acquisitions (M&A). SAP offers four tools (SAP BusinessObjects Watchlist Security; SAP BusinessObjects Governance, Risk, and Compliance solutions; SAP BusinessObjects Access Control; and SAP StreamWork) to help you mitigate risk during the M&A transaction.

How SAP Solutions Can Make Audit Management Processes More Cost-Effective

Tue, 4 Oct 2011 11:04:49 EST

Organizations face challenges to make their internal audit processes less labor intensive and more cost-effective. Learn how you can manage resources, schedules, tasks, and remediation activities for internal audit programs using SAP NetWeaver�s audit management functionality.

How to Validate Segregation of Duties Results

Tue, 13 Sep 2011 14:52:42 EST

Upon first running segregation of duties (SoD) reports in SAP BusinessObjects Access Control, management staff can become overloaded with data and assume that the results simply cannot be correct. It is then the responsibility of the owners of SAP BusinessObjects Access Control to prove that the reports are accurate. Step through the process that SAP BusinessObjects Access Control owners can go through to prove that the reports are correct. The steps are specific to SAP BusinessObjects Risk Analysis and Remediation (RAR) version 5.3, as this is currently the most used version. They are also applicable to SAP BusinessObjects Access Control 10.0.

Take Full Advantage of SAP Business Workflow in SAP BusinessObjects Access Control 10.0

Mon, 12 Sep 2011 9:27:13 EST

SAP BusinessObjects Access Control 10.0 uses the standard SAP Business Workflow for all approval processes in the application, including user access requests. This very robust workflow engine supports more flexible multitiered routing and approval matrices. At the same time, workflow configuration in version 10.0 is one of the areas that underwent significant change and therefore requires delta training for implementers who are already proficient with the previous release 5.3 of the application. Learn how to configure the workflow engine in version 10.0 leveraging SAP NetWeaver�s Business Role Framework Plus (BRF+).

Ensuring SoD Library Quality

Fri, 9 Sep 2011 10:06:09 EST

Learn how to get the SAP user and approver community truly involved in reviewing segregation of duties (SoD) risk rules.

Spotlight on Security Parameters

Tue, 6 Sep 2011 9:58:36 EST

Configuration parameters play a key role in helping you maintain security controls at any SAP installation. Review a five-point checklist from Richard Castle of Ernst and Young to ensure that you are following best practices for implementing security controls at your organization. Then learn from the comments of Selva Kumar, the vice president of Softsquare LLC and owner of SAPsecuritytrainer.com, about challenges related to establishing and maintaining security parameters for SAP systems.

How to Migrate Your Current SAP BusinessObjects Access Control Deployment to Version 10.0

Tue, 9 Aug 2011 18:11:09 EST

Version 10.0 of SAP BusinessObjects Access Control comes with a revised platform and runs on an SAP NetWeaver application server ABAP. If you want to upgrade your current implementation of SAP BusinessObjects Access Control you�ll need to migrate your data using export and import tools provided with the software. Learn how to plan a migration and examine the supporting tools.

Use SAP BusinessObjects Process Control to Avoid Paying Twice

Fri, 22 Jul 2011 12:22:19 EST

Learn how to use automated control rules in version 3.0 of SAP BusinessObjects Process Control to identify potential duplicate payments.

Increase Supplier Compliance with Sustainable Business Networks

Tue, 19 Jul 2011 12:28:16 EST

Brands and manufacturers maintain complex supply chains of material, service, and component vendors. To demonstrate compliance with a myriad of social, economic, and environmental regulations, maintaining accurate records of supplier compliance in procurement and ongoing supplier management activities is necessary. Likewise, suppliers to multiple brands receive duplicative compliance requests simultaneously, driving up compliance reporting and business improvement activities when resources are not available to accommodate such requests.

An Overview of the New Harmonized Version 10.0 of SAP BusinessObjects GRC Solutions

Thu, 7 Jul 2011 15:46:49 EST

Learn about key improvements of version 10.0 of SAP BusinessObjects GRC solutions. They include the considerably simplified system architecture, owing to recoding of the SAP BusinessObjects Access Control application on the ABAP stack, the harmonization across all levels from the look and feel of the user interface to the data model, and even deeper integration of the components coming with many new features.

Designing Effective Mitigating Controls

Wed, 6 Jul 2011 17:40:11 EST

Because mitigations are normally detective controls, it�s very important that they are designed in a way to maximize their effectiveness. Learn the key concepts for designing, documenting, implementing, testing, and monitoring an effective mitigating control. In addition, examples show how you can use SAP BusinessObjects Access Control risk analysis and remediation to help document and monitor these mitigating controls.

Automatically Create 7501/3461 Forms for Quick Customs Processing Using SAP BusinessObjects Global Trade Services

Wed, 29 Jun 2011 13:27:31 EST

Discover how to use the SAP BusinessObjects Global Trade Services Customs Management module to accomplish entry processing and customs declaration before goods receipt.

Make the SAP BusinessObjects Global Trade Services 10.0 UI Easy to Use with New Visualization Features

Thu, 23 Jun 2011 17:11:54 EST

Learn the visualization aspect of version 10.0 of SAP BusinessObjects GRC solutions with specific examples of version 10.0 of SAP BusinessObjects Global Trade Services. Discover some of the key differences in the user interface between versions 10.0 of SAP BusinessObjects Global Trade Services and SAP BusinessObjects GRC solutions, including visualization.

10 Tips to Follow During Your CUP Deployment

Mon, 13 Jun 2011 11:37:42 EST

Using compliant user provisioning in SAP BusinessObjects Access Control, you can check in real time if the authorization for a new user or a change made to an existing user�s status is in conflict in any way. Setting up CUP is not simple if your company has not clearly defined and deployed a structured workflow for user management. Learn some tips on how to set up and deploy this capability and avoid pitfalls during the configuration.

How to �Stay Clean� (for Now) with Risk Terminator

Mon, 6 Jun 2011 14:16:01 EST

To realize all the business benefits of SAP BusinessObjects Access Control, it is important that you implement compliant user provisioning and enterprise role management (formerly Access Enforcer and Role Expert). However, if you are not ready to do that, Risk Terminator provides a very good interim solution. You can follow these step-by-step instructions for configuring Risk Terminator.

What�s New in Version 10.0 of SAP BusinessObjects Access Control?

Tue, 31 May 2011 14:53:41 EST

Learn about the key benefits arising from recoding version 10.0 of SAP BusinessObjects Access Control on the ABAP platform and its harmonization with other SAP BusinessObjects GRC solutions such as version 10.0 of SAP BusinessObjects Process Control and version 10.0 of SAP BusinessObjects Risk Management. Walk through the key improvements in the areas of access risk analysis, user access management, business role governance, centralized emergency access, and improved identity management integration.

Augment Your Controls Around the Management of SAP Developer Keys

Fri, 29 Apr 2011 10:40:54 EST

Learn how to strengthen your organization�s management of SAP development and object key controls to ensure that your system security and application security are not compromised.

Dodd-Frank Act: Standardize Risk Management Processes with SAP BusinessObjects Risk Management 10.0

Tue, 19 Apr 2011 11:34:49 EST

Ensure that your enterprise�s risk management procedures comply with the Dodd-Frank Act�s requirements pertaining to the management of systemic risks by using SAP BusinessObjects Risk Management 10.0. It supports the five phases of risk management.

Set Up Risk Indicators as an Early Warning System and Leverage Actionable Reports for Risk Monitoring

Mon, 21 Mar 2011 13:04:22 EST

A risk monitoring framework delivers actionable alerts and reports that support decision makers in managing risk responses. It includes automated key risk indicators (KRIs) that trigger early warnings, meaningful reports of the current risk status, and records of risk incidents and losses as lessons learned. Learn how to set up KRIs in SAP BusinessObjects Risk Management 3.0 and define criteria to trigger follow-up actions. Use pre-delivered Crystal Reports to respond to frequent management questions regarding the organization�s risk status and record your risk incidents and losses in an incident and loss database.

Issue Certificates of Origin by Using Preference Processing Functionality in SAP BusinessObjects Global Trade Services 8.0

Wed, 9 Mar 2011 16:08:16 EST

Learn how SAP BusinessObjects Global Trade Services issues certificates of origin or vendor declarations for claiming reduced customs duties on your products subject to North American Free Trade Agreement (NAFTA) or European Union (EU) trade regulations. See how the enhanced archiving capabilities for preference determination are used for audits. Also, learn what preference processing configuration settings have changed in SAP BusinessObjects Global Trade Services 8.0.

Automate Your Import Filing to Reduce Compliance Costs with SAP BusinessObjects Global Trade Services

Mon, 28 Feb 2011 11:40:01 EST

Companies have to deal with the import of goods into their country and the declarations that go along with importing. To improve on efficiency, reduce costs in your compliance process, and avoid delays in customs clearance, you can automate your import declarations using functionality in SAP BusinessObjects Global Trade Services.

Quick Tip: How Succession Planning Fits into Good Corporate Governance

Wed, 23 Feb 2011 11:48:00 EST

Mitigating the risk of the inability to retain senior level employees is important in preparing organizations for the future. Succession planning is therefore a crucial part of good governance for companies big and small. If you put a strategic plan in place to mitigate the loss of a critical employee, the company can run more smoothly even if employee changes are seen.

Effectively Respond to Your Business Risks and Evaluate Residual Risk Levels

Thu, 10 Feb 2011 16:00:16 EST

Examine the fourth phase of the enterprise risk management (ERM) process: risk response allocation. See how in SAP BusinessObjects Risk Management you can distinguish between various response types and involve response owners in a collaborative process to increase accountability for response implementation. In addition to assessing response completeness and effectiveness, you can conduct a residual risk analysis employing quantitative and qualitative methods. Also learn the key integration points between SAP BusinessObjects Process Control and SAP BusinessObjects Risk Management, seeing how process controls can align with risk response.

Forestall Data Loss and Enforce Data Security with an Air-Tight Backup Policy

Mon, 7 Feb 2011 13:30:14 EST

Learn strategies that are invaluable for designing and developing a backup and restore procedure capable of safeguarding the data in your entire SAP system landscape while guaranteeing adequate data protection, security, and compliance with legal regulations.

Improve Business Reporting on Your RAR Data Using Data Mart Functionality

Fri, 14 Jan 2011 9:08:52 EST

Reporting can be challenging when technical information is not presented in a user-friendly way, causing business users to ignore it or misread it. Overcome these challenges in the risk analysis and remediation (RAR) component of SAP BusinessObjects Access Control by using the data mart feature included in Support Packages 9 and 10. Discover the customizing to make this feature work, as well as helpful links and an example of a report in one tool.

Comply with the EPA�s MRR Standard with SAP Carbon Impact OnDemand

Fri, 7 Jan 2011 13:56:22 EST

Forthcoming carbon emission reporting and monitoring efforts enacted by US regulatory authorities represent yet another compliance dimension for many commercial interests. Learn how SAP has created a flexible approach for assessing your carbon footprint and follow-up steps you can take in your compliance and sustainability program.

Quick Tip: How to Post VAT Invoices

Thu, 6 Jan 2011 16:09:27 EST

Normally the base amount for Value-Added Tax (VAT) and the VAT amount itself are part of the same invoice. The base amount is the amount for which the VAT is calculated. However, sometimes the base amount is missing on the invoice. This kind of invoice is called a VAT invoice. It concerns correction invoices and invoices related to imports. See how to enter VAT invoices by direct postings on the VAT general ledger accounts.

Conduct a Workflow-Driven Risk Analysis Across Your Enterprise and Tune It to Your Business Needs

Wed, 22 Dec 2010 15:03:55 EST

Become acquainted with the third of the five-phase enterprise risk management (ERM) process: risk analysis. Step through the configuration to customize the risk analysis to your business needs. Learn how a risk analysis is initiated either directly by a responsible risk owner as a scheduled workflow task or by a key risk indicator (KRI) showing a violation of a predefined tolerance.

Quick Tip: Prevent Errors in Your Intrastat and Extrastat Reporting by Checking Your Master Data

Tue, 7 Dec 2010 15:12:36 EST

Intrastat and Extrastat are legal European Union reports for cross-border goods movements. SAP has standard, country-specific reports available for both Intrastat and Extrastat. These reports also show errors such as incorrect or missing data. Incorrect master data causes most of these errors. It is not well known that the SAP system has reports that help you to check the correctness of the master data. Learn how to find these reports and how they work.

Sneak Peek: Sustainable Procurement as an Embedded Process to Supplier Management Activities

Wed, 1 Dec 2010 13:32:36 EST

The Sustainability Executive Advisory Committee (EAC) of SAP is developing several roadmaps to enable functions and processes to address corporate sustainability reporting (CSR), planning, and monitoring activities. Stay ahead of the curve on sustainability by previewing these conceptual roadmaps and the expected releases of related SAP functionality.

Identify Your Key Business Risks in a Collaborative Process Involving All Stakeholders in Your Enterprise

Wed, 1 Dec 2010 13:32:06 EST

Learn about the second phase in the enterprise risk management (ERM) process, risk identification. The knowledge about your business risks is spread across your organization and lines of business. A collaborative approach is required to identify and document all risks threatening your enterprise involving many different stakeholders. Discover how SAP BusinessObjects Risk Management 3.0 provides your risk managers with the means to document all key aspects of a risk and reach out to all relevant stakeholders via workflow-driven surveys to collect important information about your risks. Examine how any of your employees can propose a new risk in a self-service scenario for further investigation by your risk managers.

9 Key Controls to Mitigate Purchase-to-Pay Compliance Concerns

Fri, 5 Nov 2010 16:22:21 EST

Step through nine common purchase-to-pay scenarios and their proper mitigations on the way to compliance. These tips include configuration and processes you can apply in your standard SAP ERP systems.

Continuous Controls Monitoring: A Cost-Effective Way to Ensure Compliance

Mon, 1 Nov 2010 14:13:28 EST

Continuous controls monitoring (CCM) can help reduce compliance costs, strengthen the control environment, and reduce the risk of unintentional errors and fraud. Learn how using CCM in your GRC activities can improve business process operations in an efficient, cost-effective manner.

Start Your Enterprise Risk Management Process with Diligent Risk Planning

Mon, 18 Oct 2010 11:44:18 EST

More and more, companies are recognizing the relevance of solid risk management to protect themselves from diverse threats and increase the success rate of their strategies and initiatives. The enterprise risk management (ERM) process can be divided into five phases: risk planning, risk identification, risk analysis, risk response allocation, and risk monitoring. Learn about how the risk planning phase is covered in SAP BusinessObjects Risk Management 3.0, and how to set up the required master data structures to provide a solid framework for your ERM process.

Explore Cloud Services for Application Testing While Controlling Risks through Governance

Thu, 14 Oct 2010 14:49:32 EST

Service rentals, faster service, low operational costs, and lower energy costs are some of the reasons for the increasing popularity of cloud services for application testing. Testing procedures, economies of scale, service governance, and jurisdictional issues are the criteria in selecting a cloud service. To protect test plans and tools against unauthorized access, risks are controlled through governance.

SAP BusinessObjects Global Trade Services: Minimize Trade Risks with Letters of Credit

Tue, 21 Sep 2010 15:17:46 EST

See how SAP BusinessObjects Global Trade Services handles letters of credit and understand the enhancements in the letter of credit functionality for faster and more efficient processing. Learn how this functionality is integrated with the logistics system. Find out how to configure letters of credit in SAP BusinessObjects Global Trade Services through a step-by-step configuration checklist.

Implement a Compliant Identity Management Solution for Effective Provisioning, Reporting, and Role Management

Wed, 8 Sep 2010 15:10:15 EST

Learn how to achieve efficient, compliant, and secure management of user accounts and identities with SAP NetWeaver Identity Management (SAP NetWeaver IDM). Step through an overview of SAP NetWeaver IDM, including the product�s architecture and integration capabilities.

Follow a Reliable Project Management Framework for Your SAP Archiving Process

Wed, 8 Sep 2010 13:52:20 EST

Learn a project management methodology that is imperative for a successful SAP archiving project.

Increase the Success Rate of Your Strategies and Initiatives through an Enterprise Risk Management System

Fri, 3 Sep 2010 13:46:29 EST

Many risk managers complain about a lack of enterprise insight and alignment of risk management to the strategic objectives of their organization. With a rather manual and inconsistent approach based on emails and spreadsheets, they often fail to oversee the impact of risks to the strategic goals and whether appropriate risk responses were implemented to mitigate risks. SAP BusinessObjects Risk Management 3.0 is an enterprise-scalable, near real-time, integrative solution to align enterprise risk management with corporate strategy initiatives, and effectively mitigate risk. Learn how it optimizes corporate performance, maximizes visibility of risk impacts and effectiveness of risk responses, and sends out early alerts through automated monitoring of key risk indicators.

Keep Your Order-to-Cash Documents� Integrity Intact within a Global Trade Compliance Program

Tue, 17 Aug 2010 16:42:48 EST

When considering standard and non-standard order-to-cash processes, you can employ key workarounds to preserve standard SAP documents as the system of record. Understand the document flow of an order-to-cash process within a global trade operation, as well as the effects on plant operations. Then step through four example adjustments you can make to your order-to-cash process that keep you compliant with global trade policies and regulations.

Remediate Issues within Financial or Operational Compliance Initiatives in a Single System of Record

Mon, 16 Aug 2010 10:50:26 EST

Too often, controls are managed using inadequate tools (e.g., point solutions, document repositories, and spreadsheets) that require too much manual tracking and updating. With SAP BusinessObjects Process Control 3.0, you can streamline issue identification and remediation with automated task notification and workflow-driven remediation plans.

Improve Traceability with SAP Solution Manager

Tue, 27 Jul 2010 11:20:11 EST

With the advent of Sarbanes-Oxley and other compliance rules, the need for full traceability across a solution development effort is expanding far beyond just the pharmaceutical industry. SAP Solution Manager has a collection of features that enable your project to provide end-to-end visibility to all aspects of solution development and delivery. From initial design through final testing and signoff, SAP Solution Manager allows you to link and trace all the activities, documents, and technical objects needed to deliver your solution.

Automate Online Export Declarations to Germany with ATLAS

Mon, 26 Jul 2010 14:20:41 EST

Understand ATLAS, the online automated export declarations system for outbound shipments from Germany, including the system architecture and how to implement it. Walk through the configuration and associated system setup to enable the process and the communication.

A Technical How-To for Installing SAP BusinessObjects Sustainability Performance Management

Thu, 8 Jul 2010 16:27:40 EST

SAP BusinessObjects Sustainability Performance Management deals with the measurement of performance data ensuring emissions tracking and reporting, aligning sustainability-related topics with corporate strategies. Gain some technical insight into this solution, such as how to deploy it, where to find the software if you have the license, and the minimum requirements for your landscape. Then learn how to configure the setup of SAP BusinessObjects Sustainability Performance Management for end-user access.

Manage and Improve Your Sustainability Performance Efficiently

Tue, 22 Jun 2010 11:38:47 EST

SAP BusinessObjects Sustainability Performance Management helps organizations track and communicate sustainability performance, set goals and objectives, and monitor activities � all while helping to reduce the time and cost spent collecting data and compiling disclosures. Learn more about the business case for this application and how it works on a high level. Understand SAP�s two-fold role in the sustainability area as exemplar and enabler.

Program Risk and Change Management for SAP BusinessObjects GRC and EPM Solutions

Fri, 4 Jun 2010 13:35:43 EST

SAP BusinessObjects enterprise performance management (EPM) solutions provide a transparent approach to strategic decision making in the organization. Best practices in the implementation of these and SAP BusinessObjects GRC solutions can reduce and mitigate risks during program deployment activities.

Optimize Data Management in All Phases of Your SAP Implementation

Fri, 4 Jun 2010 10:37:24 EST

Poor data management can lead to many problems, from incorrect data, to a lack of integration, to bad analysis. Learn ways an effective data management strategy can help you in your efforts to optimize your system�s performance while increasing your compliance and reducing cost.

Improve Your Authorization Concept by Deriving Roles in Enterprise Role Management

Thu, 27 May 2010 16:09:06 EST

Enterprise Role Management (ERM) helps your role design process with a predefined, customizable design methodology that guides you through role definition, authorization maintenance, risk analysis, role approval, and role generation in your SAP back-end systems. During role maintenance, you can manage massive role derivation and adopt a mapping for speeding up this process.

Take Advantage of Automated Controls for Continuous Monitoring and Compliance Testing

Fri, 14 May 2010 14:57:25 EST

Learn how the different options for control automation included in the automated control framework in SAP BusinessObjects Process Control 3.0 turn tedious and error-prone manual tests into a repeatable automated process.

Simplify Your Intrastat Declarations Processing and Reporting in Different File Formats

Wed, 12 May 2010 13:34:26 EST

Learn the electronic compliance reporting functionality that comes in SAP BusinessObjects Global Trade Services, both from a feeder system communication and configuration perspective.

Ensure Success in Your Next SAP Audit with Standard Audit Features

Wed, 21 Apr 2010 11:53:38 EST

Conduct technical assurance audits using robust features within your existing SAP ERP implementation. Discover undocumented tips for leveraging key reports and controls to gain transparency and the necessary evidence trail to perform rigorous system and business process audits.

Mitigate Residual Risks When Using SAP�s Green Software Solutions

Thu, 15 Apr 2010 16:26:18 EST

Learn how to mitigate residual risks of carbon emissions when using SAP�s green software solutions. Find out more about SAP Carbon Impact on-demand service, how to visualize and compare carbon footprint data with dashboards, and how to mitigate sustainability residual risks.

Reduce Costs in Compliance Management with a Top-Down, Risk-Based Scoping Approach

Mon, 12 Apr 2010 11:28:30 EST

With the requirement of identifying and assessing the design and operating effectiveness of internal controls many companies have ended up producing too much documentation and increased testing, resulting in increased costs of compliance. Regulatory agencies such as the US Securities and Exchange Commission and the Public Company Accounting Oversight Board (PCAOB) encourage companies to focus on areas where there is the greatest risk that internal controls over financial reporting would fail to prevent or detect a material misstatement in the financial statements. SAP BusinessObjects Process Control 3.0 supports a top-down, risk-based scoping based on Audit Standard 5 by PCAOB. Learn how these scoping instruments work and provide a powerful scoping method when applied in combination.

10 Best Practices for Enforcing Data Security, Control, and Consistency in the Software Logistics Process

Tue, 30 Mar 2010 13:49:16 EST

Learn important best practices, tips, and guidelines that are invaluable for ensuring that the process of making changes and transporting changed data in the SAP ABAP system is well secured against possible security threats and risks.

Prepare for an Audit of Your SAP Systems: What You Need to Ensure a Successful Result

Fri, 26 Mar 2010 16:12:12 EST

Learn the fundamentals about auditors and the audit process. See the primary categories of an SAP audit, and tips on some of the more problematic areas within one of these categories � the general computer controls audit.

SAP BusinessObjects Planning and Consolidation: How to Effectively Secure Dimensions within a Hierarchy

Tue, 23 Mar 2010 16:34:48 EST

Member access profiles in SAP BusinessObjects Planning and Consolidation are a fairly straightforward concept, but it can get tricky when you are assigning read, write, or denied access to individual members in a node and a parent within a hierarchy. Discover some tips to keep in mind while securing hierarchical dimensions.

Reduce Risk in Your Supply Chain with Supply Chain Performance Management

Fri, 12 Mar 2010 10:23:56 EST

As part of its positioning for the corporate boardroom set of enterprise performance management applications, SAP BusinessObjects Supply Chain Performance Management enables full visibility of the value chain using metrics and indicators. Learn how to reduce risks in material and intellectual property flow in your supply chain and create a more effective organization using the features available in SAP BusinessObjects Supply Chain Performance Management.

Join the GRC Expert LinkedIn group!

Thu, 11 Mar 2010 16:53:25 EST

Click the following link to join the GRC Expert LinkedIn group and interact with editors, authors, and other readers: http://www.linkedin.com/groupRegistration?gid=2756790

Manage Multiple Compliance Initiatives Effectively Leveraging Shared Master Data

Thu, 11 Mar 2010 10:49:32 EST

When different teams work with different procedures in different software solutions to address the many internal policies and external regulations to which a company is subject, it leads to inconsistent master data, unnecessary costs, and a lack of management visibility. SAP Business Objects Process Control 3.0 comes with a global master data catalogue and a multiple compliance framework to provide an efficient solution. It allows for managing compliance with respect to multiple regulations in a unified manner in a single system using shared master data. Learn more about how it works and how to set it up in the system.

Quick Tip: Safeguard the Message Server via Security-Centric Parameterization

Thu, 11 Feb 2010 16:39:46 EST

Learn how you can enhance the security of the message server by setting profile parameters appropriately.

Reduce Your Procurement Risks with Spend Analytics

Thu, 11 Feb 2010 15:33:45 EST

As part of its positioning for the corporate boardroom set of enterprise performance management applications, SAP BusinessObjects Spend Performance Management enables financial and procurement decision makers to have full visibility into both managed and unmanaged spend in the enterprise and throughout the supply chain. Learn how to reduce procurement risks in your supply chain and create a more effective organization in the post-crisis economy through the features available in SAP BusinessObjects Spend Performance Management.

Reduce Costs for Compliance by Implementing a Risk-Based Internal Control Solution

Thu, 4 Feb 2010 14:18:57 EST

Costs for compliance and fraud prevention have risen significantly in recent years and with the current economic situation we�re likely to manage more regulations in the future, further driving costs up. Companies relish efficiency in the GRC space to garner the true benefits of compliance. One means of more efficient compliance is an integrated solution called Risk-Based Internal Control, which helps ensure continuous compliance with regulatory requirements and company policies including government mandates, industry standards, and internal policies.

3 Steps to IFRS Conversion for Small and Medium Entities

Tue, 26 Jan 2010 13:55:48 EST

Follow this process to help you analyze business impacts and identify, prioritize, and monitor risks if you are a small (fewer than 100 employees) or medium-sized (100 to 500 employees) company converting to International Financial Reporting Standards.

Tackle Changes to Inventory, Cash Flow, and Benefit Regulations with SAP ERP

Tue, 19 Jan 2010 13:59:46 EST

Review some accounting standard changes, including changes to foreign exchange rates, inventory, and benefits, and see how the SAP ERP system can address them.

Perform Hazardous Substance Checks by Integrating Two SAP Systems

Fri, 15 Jan 2010 15:05:54 EST

Learn how to run hazardous substance checks in SAP Environment, Health, and Safety Management using SAP BusinessObjects Global Trade Services. These checks for hazardous substances help gather information from the logistics system and pass it on to the trade compliance system for early warning, reporting, and appropriate corrective actions. They also help with import and export quantity restrictions, as well as import and export restrictions for products for specific countries of origin.

Create and Monitor a Risk-Adjusted Strategy for the Post-Crisis Economy

Thu, 7 Jan 2010 16:50:42 EST

As part of its positioning for the corporate boardroom set of enterprise performance management applications, SAP BusinessObjects Strategy Management enables decision makers to access what is happening in real time in the organization, while leveraging any existing back-office enterprise software investments. Learn how to address risk in the development of go-forward strategies in the post-crisis economy through the features available in SAP BusinessObjects Strategy Management.

Automate Your SoD Review with SAP BusinessObjects Access Control 5.3 � Part 2

Tue, 5 Jan 2010 16:36:24 EST

The Segregation of Duties (SoD) Review feature in SAP BusinessObjects Access Control 5.3 allows for an automated and decentralized SoD review by business managers or risk owners. The SoD Review takes the SoD violations detected during a batch risk analysis and organizes their resolution in a request-based approval workflow. Reviewers can assign mitigation controls for users with SoD violations or request removal of detected violations from the security administrators in the same workflow. The article comes in two parts. In part 1, I went through a detailed process flow during an SoD review, its business benefits, and recommended use of various features. Part 2 focuses on configuration of the SoD Review in the system.

Automate Your SoD Review with SAP BusinessObjects Access Control 5.3

Tue, 5 Jan 2010 16:35:49 EST

The Segregation of Duties (SoD) Review feature in SAP BusinessObjects Access Control 5.3 allows for an automated and decentralized SoD review by business managers or risk owners. The SoD Review takes the SoD violations detected during a batch risk analysis and organizes their resolution in a request-based approval workflow. Reviewers can assign mitigation controls for users with SoD violations or request removal of detected violations from the security administrators in the same workflow. The article comes in two parts. In part 1, follow a detailed process flow during an SoD review, its business benefits, and recommended use of various features. Part 2 focuses on configuration of the SoD Review in the system.

How SAP ERP Combats the Challenges of Global Accounting and Financial Reporting Standards

Tue, 22 Dec 2009 9:12:55 EST

Review some SAP ERP solutions, functionalities, and capabilities that you can use to meet the challenges of specific International Financial Reporting Standards (IFRS) and International Accounting Standards (IAS) requirements, including ones that cover revenue, accounting policies, operating segments, and more.

Make Your Dashboards Secure: Strategies and Options

Fri, 11 Dec 2009 14:23:16 EST

While there is widespread recognition of the value that dashboards generate, there is also an incipient apprehension that they are not secure. Walk through some ways you can validate the security in dashboards using Xcelsius as an example, while maintaining the user-friendliness that is expected in a dashboard.

Keep Up with Multiple Regulations by Controlling Multiple Data Retention Policies

Mon, 30 Nov 2009 16:19:36 EST

Follow four steps to help you identify, prioritize, and plan a data retention policy.

Improve Your Corporate Sustainability Reporting with SAP BusinessObjects Sustainability Performance Management

Fri, 13 Nov 2009 16:09:20 EST

Walk through the key features of SAP BusinessObjects Sustainability Performance Management and see how you can use it along with other parts of your SAP system for your corporate sustainability reporting needs.

Set Up Intuitive and Automated Reporting Functionality with Crystal Reports

Thu, 5 Nov 2009 15:45:04 EST

Discover a strategy for configuring and developing Crystal Reports for your organization�s SAP BusinessObjects GRC solutions, such as SAP BusinessObjects Process Control. Walk through key installation requirements and configuration steps for your SAP BusinessObjects GRC solutions related to the SAP BusinessObjects Enterprise server, and identify key configuration settings that need to be put into place. Know the other aspects of developing new Crystal Reports to meet your additional needs for SAP BusinessObjects GRC solutions.

Handle Partially Reclaimable VAT with Pro-Rata VAT Functionality in Your SAP System

Tue, 27 Oct 2009 15:44:13 EST

Many organizations in the EU use Value Added Tax (VAT) on certain sales. However, not all sales allow VAT charges. If you�re a company providing products that are both VAT-eligible and VAT-ineligible, how do you account for this in your system? See how to set up and customize pro-rata VAT in your SAP system.

Quick Tip: Implement SSL Certificates from Visual Administrator to Meet Security Needs

Fri, 23 Oct 2009 16:28:50 EST

Follow this process when you want to secure your SAP NetWeaver Portal with SSL quickly, but don�t want to change your corporate portal security settings. This process also avoids certificate conflicts that may arise.

Sidestep Disasters with a Business Continuity Plan

Thu, 22 Oct 2009 13:28:26 EST

You need to have a plan in place if a risk assessment shows that the likelihood of an emergency event (e.g., severe storms or earthquakes) occurring is high. A business continuity plan allows an organization to minimize the consequences of a disaster and continue normal business functions afterward.

Keep Your Web Applications Sarbanes-Oxley-Compliant by Running CUP for SAP NetWeaver Portal

Fri, 16 Oct 2009 11:57:37 EST

SAP BusinessObjects Access Control 5.3 can connect to the SAP NetWeaver Portal for automated user provisioning. Requesters can use the Compliant User Provisioning (CUP) product capability to request access to SAP NetWeaver Portal and select group memberships, portal roles, and User Management Engine (UME) roles. During the approval process, you can execute a risk analysis on the level of iViews and UME actions included in the requested roles to ensure Sarbanes-Oxley compliance with respect to the Web applications accessible through SAP NetWeaver Portal.

Audit-Ready Your Segregation of Duties Remediation Process with User Remediation in RAR

Fri, 16 Oct 2009 11:52:43 EST

Discover key tools and process steps to assist in the remediation of risks at the composite role and user level identified by SAP BusinessObjects Access Control Risk Analysis and Remediation.

Start Your Segregation of Duties Risk Mitigation Smart � at the Single Role Level

Tue, 29 Sep 2009 15:51:37 EST

Discover key tools and process steps that assist in the remediation of risks identified at the single role level by SAP BusinessObjects Access Control Risk Analysis and Remediation.

6 Tips for Improving Reporting Governance

Thu, 24 Sep 2009 16:36:09 EST

Make sure your reporting is accurate by following these six surefire tips for reporting governance.

Behind SAP�s Internal IFRS Project

Thu, 24 Sep 2009 13:41:27 EST

Like most global businesses with subsidiaries in dozens of countries, SAP�s reporting requirements are daunting. The looming switch to IFRS in the US has complicated things even further, requiring SAP to implement a parallel accounting structure to account for both US GAAP and IFRS reporting rules. See how the company was able to manage this complex project successfully, and how it plans to build on IFRS for the future.

Quick Tip: 5 Steps to Accept or Reject Residual Risks

Tue, 15 Sep 2009 14:02:45 EST

Follow a five-step process in SAP BusinessObjects Risk Management for evaluating risks that remain in your system and may threaten your compliance with major regulations.

Improve Operational Effectiveness by Properly Loading and Monitoring SPL Data

Wed, 9 Sep 2009 11:55:09 EST

Review the operational considerations and the effective use of sanctioned party list functionality in SAP BusinessObjects Global Trade Services. See how to index business partner records effectively and manage your content and operational activities.

Improve SPL Screening Performance to Ensure Compliance with Your Global Business Partners

Fri, 28 Aug 2009 11:25:05 EST

A sanctioned party list (SPL) screening involves screening your business partners against the respective government-published denied party list (DPL). You can set up SAP BusinessObjects Global Trade Services to ensure that your system keeps your legal business partners in order.

Best Practices for Secure Programming in SAP NetWeaver

Wed, 19 Aug 2009 14:33:59 EST

Review best practices that you should employ in application development with particular emphasis on the functionalities available in SAP NetWeaver that guarantee secure programming.

Perform Decentralized Periodic User Access Reviews with SAP BusinessObjects Access Control 5.3

Tue, 11 Aug 2009 10:50:41 EST

SAP BusinessObjects Access Control identifies and prevents access and authorization risks in cross-enterprise IT systems to prevent fraud and reduce the cost of continuous compliance and control. The User Access Review (UAR) feature of SAP BusinessObjects Access Control 5.3 automates and documents the periodic decentralized user access review by business managers or role owners. It provides a workflow-based review and approval process. Follow a process flow during a UAR to see its business benefits, configuration, recommended usage of the feature, and workflow options.

Build and Implement a Rock-Solid Compliance Framework for Your IFRS Conversion Project

Tue, 21 Jul 2009 10:45:29 EST

Many countries already operate under International Financial Reporting Standards (IFRS), while the US, among other countries, may be joining the fray. To simplify the conversion from your local reporting standard to IFRS and better manage the associated compliance risk, organizations must adopt strategies and best practices based on a proven compliance framework.

IFRS Adoption for US Companies: A Primer

Wed, 1 Jul 2009 16:29:41 EST

Worried about the impending US conversion to International Financial Reporting Standards (IFRS)? See some quick hints about things you should know and places you can look for information as the landscape changes.

Make Identity Management Sarbanes-Oxley-Compliant by Leveraging Integrated SAP Solutions

Wed, 1 Jul 2009 11:52:36 EST

Efficient processes for identity management (IDM) are a challenge to many companies � in particular when access- and authorization-related risks must be managed and taken under consideration prior to provisioning access privileges. SAP BusinessObjects Access Control 5.3 comes with a Web service-based interface intended to provide risk analysis and mitigation features to IDM solutions. See how to integrate one such solution, SAP NetWeaver Identity Management 7.1, with SAP BusinessObjects Access Control 5.3 to obtain a highly cost-efficient solution for compliant IDM.

Quick Tip: Comply with Capital Goods Reporting for France, Spain, and Portugal

Mon, 29 Jun 2009 14:52:35 EST

You can set your SAP system to automatically create an adjustment posting to report capital goods invoices separately, as required by some countries.

Avoid Audit Problems by Building Controls as Part of Your Implementation Life Cycle

Fri, 26 Jun 2009 13:23:52 EST

To have an efficient and effective control design process, certain risk and control activities need to occur during the implementation process. These activities reduce the potential for audit issues and minimize future rework. By following this strategy you significantly increase the likelihood of having a successful implementation and a pain-free audit.

Quick Tip: 10 Best Practices for Developing and Implementing SAP Security Policies

Tue, 23 Jun 2009 9:22:18 EST

There are good and bad ways of setting up a security policy in your organization. See 10 areas that deserve consideration when making your policy.

Distribute Critical Data Among Multiple SAP Systems by Using Change Pointers

Fri, 19 Jun 2009 11:45:30 EST

Using change pointers allows you to select exactly what data you want integrated systems to communicate to each other. See an example of the functionality with SAP ERP Central Component and SAP BusinessObjects Global Trade Services.

Integrate Access and Process Controls in the Latest Releases of SAP BusinessObjects Solutions for GRC

Thu, 11 Jun 2009 16:41:42 EST

SAP BusinessObjects Access Control�s Risk Analysis and Remediation (RAR) capability generates the rule library for segregation of duties and performs the access risk analysis for the user. SAP BusinessObjects Process Control manages the controls for each business process. Integrating the two applications allows you to control both of these functions from SAP BusinessObjects Process Control.

Combat Chaos with a Lock-Down Security Policy in 12 Key Areas of Your SAP Environment

Thu, 11 Jun 2009 15:49:07 EST

Security policies and procedures should be a central concern of all employees of an organization. Review important areas of the SAP ERP system that has to be driven by effective security policies.

Overcome a Top Auditing Issue with Superuser Privilege Management

Tue, 26 May 2009 9:35:05 EST

Procedures for granting emergency access to SAP systems often raise concerns during a system audit. SAP BusinessObjects Access Control can provide an effective solution. The Superuser Privilege Management (SPM) capability manages access to emergency users in a secure and auditable manner. See how it works in the SAP back end and the different reporting measures you can take.

SAP BusinessObjects Global Trade Services Handles Complex Compliance Checks

Tue, 19 May 2009 9:57:24 EST

Discover how to perform an import and export check using SAP BusinessObjects Global Trade Services.

Create a Centralized Control Management System by Integrating Access and Process Controls

Mon, 4 May 2009 15:25:29 EST

See how to integrate SAP BusinessObjects Access Control and SAP BusinessObjects Process Control. You can optimize reporting practices, consolidate segregation of duties issues, and troubleshoot any potential problems using these two applications.

Simplify Your Bonded Warehouse Reporting with SAP BusinessObjects Global Trade Services

Mon, 4 May 2009 13:17:04 EST

Understand how to configure and set up bonded warehouse with SAP BusinessObjects Global Trade Services and SAP ERP Central Component. In doing so, you can meet the requirement of recording transactions and movement of goods within the free trade zone or bonded area with your logistics system.

VAT Changes Coming in 2010: Are You Ready?

Thu, 16 Apr 2009 10:57:36 EST

Because of the continuous extension of the European Union (EU) and the lack of alignment of local Value Added Tax (VAT) rules, VAT-related fraud is increasing and has resulted in unequal competition among suppliers in different countries. To reduce fraud and give suppliers equal treatment regardless of their country, VAT rules for services between EU countries will change starting in 2010. Learn about the consequences for your SAP system.

Define Risks and Functions with Risk Analysis and Remediation Rule Architect

Tue, 14 Apr 2009 13:47:52 EST

Discover the makeup and functionality of Rule Architect within SAP BusinessObjects Access Control Risk Analysis and Remediation.

A Checklist for an SAP Solution Manager System Audit

Tue, 7 Apr 2009 13:48:40 EST

SAP Solution Manager's features make it a challenging candidate for a system audit and review. Use this matrix to establish your approach to auditing SAP Solution Manager.

A Checklist for Developing Your Global Template

Mon, 23 Mar 2009 16:44:57 EST

Discover the components of a global template and the advantages of implementing it across an enterprise.

Enterprise Role Management - The Way to Compliant Role Design

Fri, 13 Mar 2009 10:00:45 EST

Enterprise Role Management helps streamline your role design process with a pre-defined, customizable design methodology that guides you through role definition, authorization maintenance, risk analysis, role approval, and role generation in your SAP back-end systems. It also ensures Sarbanes-Oxley compliance of your roles.

How a Film Company Uses SAP NetWeaver BW for Closed-Loop Planning

Wed, 11 Mar 2009 9:45:15 EST

Follow the setup for building and executing controlsin SAP NetWeaver BW in the context of a real-life media-specific business process.

Corporate Governance in the US, Singapore, and India: How Does Sarbanes-Oxley Compare?

Thu, 5 Mar 2009 12:00:57 EST

Many parts of corporate governance codes are similar from country to country. The United States� Sarbanes-Oxley Act is the most well-known code, and many countries� efforts toward corporate governance resemble it. See how India and Singapore � two countries in much different socioeconomic climates than the US � handle corporate governance in comparison to the US.

SAP GRC Global Trade Services Eases Product Classification

Tue, 3 Mar 2009 14:34:54 EST

Discover how you can use the classification tool available in SAP GRC Global Trade Services to maintain and assign the export/import classification, Commodity Code, and the Harmonized Tariff System.

Part 2: Handle Foreign Currency Risk with Exposure Management

Fri, 20 Feb 2009 17:08:33 EST

Analyze and properly maintain your exposures in SAP Exposure Management before transferring them to SAP Hedge Management.

Quick Tip: A Little-Known Program Eases Uploads of Commodity Codes

Mon, 2 Feb 2009 17:03:01 EST

Save time by maintaining commodity codes using a standard available upload program. By using this program, you can avoid the process of customizing, thus allowing end users to maintain the commodity codes on their own.

Configure and Implement the Proper Internal Controls Up Front for an Easier Audit

Fri, 23 Jan 2009 16:15:56 EST

Having to go back and change your SAP system or your related business processes to deal with audit concerns takes time away from your daily operations and results in unnecessary distractions. By configuring your SAP system appropriately and designing your related business processes to effectively address your business risks, you can save significant effort. This article provides an overview of how to set up your SAP system properly the first time. Learn how understanding common business risks and typical audit concerns and carefully managing the SAP implementation process to account for these risks and concerns can eliminate nearly 90% of all audit findings.

Part 1: Handle Foreign Currency Risk with SAP Exposure Management

Fri, 23 Jan 2009 16:15:15 EST

Discover the features in SAP Exposure Management that help you mitigate risk and maintain hedge procedures in part 1 of a two-part series on the functionality.

Implement 5 Key Controls to Mitigate Risk in Your Financial Closing Process

Fri, 23 Jan 2009 16:14:32 EST

See five scenarios that commonly produce risk � and how to address them with configuration.

Get Your System Clean with Risk Analysis and Remediation

Fri, 23 Jan 2009 16:13:46 EST

Become and stay Sarbanes-Oxley compliant with Risk Analysis and Remediation. Learn about its main features, technical architecture, and setup.

Part 2: Set Up Preference Processing to Delineate Customs Tariff Priorities and Manage Risk with Global Sourcing

Fri, 23 Jan 2009 16:12:22 EST

See how to set up and perform preference processing within your global customs practices through your supply chain in both SAP ERP Central Component and SAP GRC Global Trade Services. Preference processing allows you to capture and determine the duty preference, drawback, and allowance based on the country of origin and tariff for the product.

Set Up Preference Processing to Delineate Customs Tariff Priorities and Manage Risk with Global Sourcing

Fri, 23 Jan 2009 16:09:54 EST

This walk-through of the configuration steps for Preference Processing within SAP GRC Global Trade Services Risk Management shows how to address tariff preferences in your trade application and systems. It includes setting up the communication between SAP GRC Global Trade Services and SAP ERP Central Component.

Monitor Alerts in Risk Analysis and Remediation

Fri, 23 Jan 2009 16:09:01 EST

See the different kinds of alerts in GRC Access Control Risk Analysis and Remediation and how to configure them.

Simplify Maintenance and Security with User Groups

Fri, 23 Jan 2009 16:08:26 EST

User groups are a convenient technique to group users and treat them as one entity in terms of their privileges and behavior. See a method for setting them up in your system with some considerations from a security and user administration perspective.

Address Problem Users for Compliance

Fri, 23 Jan 2009 16:07:07 EST

Discover how to easily build a role for technical batch or interface users who are very difficult to track � even if they have held SAP_ALL in production for years.