Skip to Content
Technical Articles
Author's profile photo Masood Ahmed

Unlocking the value of Manual Control Performance

Introduction:

Manual Control Performance (MCP) is a functionality of SAP GRC Process Controls module that allows an organization to centrally manage their internal controls as a single centralized repository for all the steps involved during the collection of evidences and issue management.

 

Pain Points:

  • Difficult to manage the multiple steps involved in a control and who will perform those steps¬† is a challenge as there is no central planner to trigger the process

 

  • Collection of evidences and storing them to a location without automating the execution is time consuming

 

  • Delay in completing the audit increases the cost

 

Understanding the Functionality:

Once the risk and control master data is uploaded into the process controls, MCP is a four stage process that contains

1. Building Steps: Identify the sequence, step name, step description, evidence, comment required and duration

 

2. Role Assignment: MCP follows role based approach so identifying role design and assignment is very important. In my opinion, below three roles narrative should be sufficient to meet the requirements.

Role Based Approach

 

3. Workflow: standard workflow is pretty solid and meet the requirement. Cutomization of workflows is not really required.

Workflow

Workflow

 

4. Perform and Monitor: Performance test plan will be executed in the sequence defined during the step build and reminder emails should be configured using the notification maintenance.

 

How to configure Manual Control Performance:

I found the below SAP wiki extensively listed the configuration steps that must be performed to use the MCP functionality

https://wiki.scn.sap.com/wiki/display/GRC/Configuring+Manual+Control+Performance

 

Conclusion: 

  • Reduced operating costs through standardization of testing, reporting, monitoring and documentation.

 

  • Improves the visibility and control of risk across the business, also helps enabling more effective allocation of resources.

 

  • Reduce the significant amount of email exchanges between the parties.

 

  • Provides documentation of both centralized and local control catalogs, alignment of compliance initiatives and efficient management of risks and controls through workflow functionality.

 

Please share your feedback by entering in the comment section

 

Assigned Tags

      2 Comments
      You must be Logged on to comment or reply to a post.
      Author's profile photo Frederic Mac-Farlane
      Frederic Mac-Farlane

      Nice blog.

      But is there a possibility to add the created ad-hoc issues to this workitem, so that the reviewer does not have to jump into the control itself or pull a report?

       

      Regards

      Author's profile photo Masood Ahmed
      Masood Ahmed
      Blog Post Author

      Thanks for the great feedback. I think the tool provides lot of flexibity in terms of addressing adhoc issues or issue within the step itself. It depends how one wants to leverage the issue management feature of MCP.