Skip to Content
Product Information
Author's profile photo Former Member

Selecting the right GRC solution for your organization

SAP’s solutions for customers’ governance, risk, and compliance (GRC) processes are getting increased levels of traction. In a blog post at, I review a recent article that provides advice on selecting the right solution for your GRC needs – and offer my own thoughts and advice.

The principle point in the post is that each customer should understand their own specific needs and look for related solutions. There are too many different definitions of “GRC” for that to be a useful description of the functionality that should be addressed.

There are several advantages with going with SAP’s solutions, beyond the standard functionality and cost discussions:

  • They are from SAP, a solid vendor rather than a niche provider of solutions that may not survive as the market consolidates
  • They are from SAP, using the same technology. You don’t have to bring another technology in-house, with all the support implications
  • They are from SAP and are integrated with your SAP applications for transaction management (ERP) and performance management (EPM)
  • They are from SAP and part of the company’s vision and road map for enabling customers with best of breed application software

Assigned tags

      1 Comment
      You must be Logged on to comment or reply to a post.
      Author's profile photo Former Member
      Former Member
      I won't argue your points about the advantages of going with SAP's GRC solutions, but at the end of the day whatever toolset is purchased must deliver the required functionality. Because GRC covers a lot of ground, it can be an effort just to get the key stakeholders to agree on what is required. We have found it helpful to create a requirements grid of functionality/features that are "must haves" and "nice to haves." Particularly if the choices include an option to enhance a currently installed solution, it can be helpful for the stakeholders to be clear on where the current solution falls short and confirmed testing of the required features during the proof of concept tests to avoid unpleasant surprises.