www.pwc.

com/sap

SAP GRC
Process Controls
capabilities overview
PwC Consulting Services

SAP Process Controls

Proactively building effective risk management, controls, and security design into your
business transformation is essential to improving the efficiency of your SAP
implementation and maximizing your investment. To achieve continuous benefit,
however, there must be a mechanism in place to sustain the new design of processes and
controls. With the right tools in place, you can not only protect your investment by
maintaining the template youve designed, but you can also optimize controls,
integrate, and monitor compliance management and reduce the costs of internal and
external assurance.
Protecting investment With companies regularly spending $200 million or more on
system change and business transformation projects, its critical to develop a way to
sustain newly designed processes and controls.
Optimize controls In addition to control rationalization and improving control
process efficiency, further automation of controls can reduce the number of worker hours
required to operate and test those controls. SAP GRC Process Controls (PC) offers
continuous control monitoring (CCM), allowing the automated testing of system-based
controls with exception reporting.
Centralized reporting and better visibility With a centralized control
repository, companies can document and test controls once, and share assurance across
business, finance, compliance, and legal departments. Flexible reporting and dashboards
provide quicker access and real-time visibility into the operational effectiveness of the
control environment.
Integrated compliance management An ever-increasing regulatory and
compliance environment can create a burden for global organizations. By developing a
centralized multi-compliance framework (across Legal, HR, IT, and Finance functions),
you can reduce planning oversight, reporting, testing, and overall compliance
management, as well as lower the costs of operating controls across an organization.
Supporting the transition above market Many companies continue to move
parts of the organization above market, to central functions and shared service centers.
SAP GRC PC allows effective management of control from these central locations, further
allowing benefits realization from change programs as well as increasing rigor and control
in processes.
Cost of internal and external assurance Often, internal and external audit
contain duplicative efforts. Having a centralized control platform with Process Controls
allows you to integrate internal and external audit activities. You can better target audit
activities, reducing the cost of internal audit and allowing you to deploy your internal
audit resources elsewhere. You can also drive down the cost of external audit by having
auditors place reliance on your Process Controls environment.

Solutions from an experienced leader

PwC can help your organization embed better governance and controls into your business
processes and transition into a sustainable state of monitoring by implementing the SAP
GRC PC solution. As SAPs leading implementation partner for PC, we assisted SAP with
the detailed testing and validation of the tool, which gives us better insight and
understanding into its characteristics. Because of our inherent position as a leading audit
firm, we also understand business controls inside and out. This allows us to help
companies optimize controls and rationalize them (so there are fewer controls to
maintain) and help implement the technology to keep that reduced number of controls
in place.
KEY CONTACTS:

Robert H. Clark
Philadelphia
(267) 330-2497
robert.h.clark@us.pwc.com
Elizabeth McNichol
Philadelphia
(267) 330-1456
elizabeth.f.mcnichol@us.pwc.com

Having successfully implemented SAP PC for several large global organizations, we have
developed a proven methodology that will enable organizations to manage and sustain
the change associated with an implementation seamlessly and transparently. The benefits
of our AcceleratePC methodology include:
Quick insight into key solution functionality, defining the vision, and delivering the
case for change and program roadmap
Alignment with SAPs GlobalASAP implementation methodology to bring speed and
experience to every SAP GRC Process Controls implementation project
Tools and accelerators, including target operating model definition and design
position papers, master data conversion specifications, business rule design library,
superuser training, job aids, configuration rationale, and design documents
Support throughout the SAP GRC PC implementation life cycle from our unique
Center of Excellence team, which leverages knowledge and lessons learned from
other SAP GRC projects
Confidence in PwCs proven experience implementing SAP GRC PC solutions in the
United Kingdom, the European Union, and the United States, providing international
scale and resource options

Gaining better insight for timely

decision making
With our solution in place, your business will benefit from standardized processes and
controls; greater transparency and visibility of how controls are operating within the
organization; lower-cost centralized compliance and control management; and stronger
alignment across the assurance community and lines of business, with management, and
internal and external audit getting assurance from the same source.

About PwC
PwC provides industry-focused assurance, tax and advisory services to build public trust
and enhance value for our clients and their stakeholders. More than 161,000 people in
154 countries across our network share their thinking, experience and solutions to
develop fresh perspectives and practical advice.

 2011 PricewaterhouseCoopers LLP. All rights reserved. In this document, PwC refers to
PricewaterhouseCoopers LLP, which is a member firm of PricewaterhouseCoopers International Limited,
each member firm of which is a separate legal entity.
This document is for general information purposes only, and should not be used as a substitute for
consultation with professional advisors.