Posts

Showing posts from 2010

What is GRC? Why GRC?

For IT enabled companies, in real time business scenario audit teams are focused on user access and authorization controls. The user access and authorization management is manual and it is error prone. Approval from manger for new access or change access credentials takes time and monitoring is difficult.Emergency or unexpected access maintenance is difficult. Giving unauthorized access is a violation/Risk, which causes to make fraud. Detection of these violations for user/roles is difficult. To make IT systems with audit compliance standards. SAP has given solution with the product GRC (Governance Risks & Compliance). SAP GRC solution help companies comply with Sarbanes-Oxely Act and other audit mandates by enabling organizations to rapidly identify and remove the access and authorization risk from IT systems and embed preventive controls into business processes to stop future Segregation of Duties (SoD) violations from occurring. So with the GRC, IT systems access a