EOH GRC Accelerator Business Challenges Solution Overview EOH SAP GRC BU HEAD: Justin Clarke EMAIL: Justin.Clarke@eoh.com CONTACT: +27 79 503 9148 EOH GRC Accelerator Do your business’ GRC efforts operate independently? Does your business know what authorisations are given to your employees? Does your business have sight of all potential access risks? Does your business have a central repository of its policies in place? Solution Benefits A centralized platform for all GRC functions Transparency of all authorisations per employee and role Automated flagging of potential access risks A central library for your business’ policies A centralized risk management tool aligned to global best practices Mapping of all key business processes and controls Implementation of control tests to verify whether key controls are in place and effective Business Benefits SAP GRC Access Control (AC) SAP GRC Process Control (PC) Solution Components Business Challenges The EOH GRC Accelerator Solution is built on the SAP Platform. The SAP Solution components are: SAP GRC Risk Management (RM) SAP GRC Policy Management (PM) The EOH GRC Accelerator Solution provides a common platform across Governance, Risk and Compliance with real time reporting and visualizations. It provides the capability for a rapid implementation to manage risk, policies, compliance and segregation of duties. Through a co-innovation partnership with SAP the EOH GRC Accelerator provides customers with a globally recognised GRC solution. Solution Overview Does your business identify, analyze, mitigate, and report on its enterprise risks centrally? Does your business have sight of all key processes and controls in place? Does your business monitor the effectiveness and efficiency of key controls in place?

EOH GRC Accelerator EOH Differentiators EOH Skills and Experience EOH SAP GRC BU HEAD: Justin Clarke EMAIL: Justin.Clarke@eoh.com CONTACT: +27 79 503 9148 EOH GRC Accelerator EOH Differentiators Solution Benefits EOH Presales Support 21 GRC Skilled Resources In The Following Areas: Risk Management Policy Management Process Control Access Control Basis Crystal Reporting Advisory Services: Risk Management Framework Development Governance Assessments Maturity Assessments Combined assurance reviews GRC Change Management Collected Years Of Experience In GRC 70 years Number Of GRC Projects Implemented 50 projects Industries Mining (Implats – RM, AC, PC, PM and GRC Advisory) Government (Gauteng Department of Finance – AC) Utilities (City Power – AC) Retail (AB InBev – AC and PC) Oil and Gas (PDO – AC and RM) Financial (Nest - RM) Manufacturing (PPC – RM and PC) Telecommunications (Vodacom - RM) *One example provided for each Industry EOH Skills and Experience 21 EOH GRC reports providing transparency into key information allowing business to make better decisions EOH predefined Risk Management and Process Control content to assist businesses in managing their operations for the following processes: Procure to Pay (P2P) Hire to Retire (H2R) Order to Cash (O2C) Information Technology General Controls (ITGC) Record to Report (R2R) EOH predefined configuration based on international best practice allowing for rapid implementation within 4 weeks compared to typical GRC implementations of 32 weeks EOH automated upload and clean-up tool.

EOH GRC Accelerator Presales EOH Deployment EOH Presales Support EOH SAP GRC BU HEAD: Justin Clarke EMAIL: Justin.Clarke@eoh.com CONTACT: +27 79 503 9148 EOH GRC Accelerator Solution Benefits EOH Presales Support Presales EOH Deployment EOH Presales Support to Country Manager EOH GRC will provide the following: Introductory email template Presentation Video Template proposals Template project plan Presales consultant is available for teleconferences and video demonstrations In-country visit and demonstrations once 5 company meetings are confirmed or tangible opportunity materialises Benefit to SAP Pricing specific GB Market Opportunity to upsell Licensing and Maintenance goes to in country SAP Account Manager Duration: 4 weeks Resources GRC Solution Architect GRC Senior Consultant GRC Consultant Assumptions: The duration excludes implementation of NetWeaver and the GRC application as this is usually performed by client. If EOH is required to implement these, the additional time and cost will be added. The duration is based on the content provided by GRCA. Additional content requested by the client will result in additional time and costs. The duration is based on the GRCA product. Customisation of any kind, requested by the client will result in additional time and costs. All client stakeholders will be fully available throughout the duration of the product implementation. Methodology: Onsite Remote Legend Preparation Realization Finalization Go-live & Support