1. SAP GRC
EOH GRC Solutions
Divisional divider Option 1

2. Purpose
To provide insight into the way in which SAP customers are currently viewing, managing and reporting on the governance risk and compliance items in their environments using SAP GRC tools and other best practice approaches.
Understand your business
Provide other businesses perspective
Share our technology offering
Open doors for future discussion
Discuss the role of technology in GRC
Content page 1

3. What is your current GRC environment?
Current governance structure?
Current technology support?
Which consultants support you?
What do they support with?
What reporting is provided?
Have you had any major governance issues or audit findings?
Are there any projects on around risk management?
What functions do you have in place as a business for the three lines of defence
Audit? Risk? Compliance? Financial Controls? Policy team? Health and Safety? Quality? Other?
Who are your current external auditors?
What technology do you use?
Do you use excel, word, or other disparate tools?
What reports do you provide for governance and at what levels?

4. Why integrate SAP GRC
Integrated GRC

5. Enterprise Risk Management
Why Integrate SAP GRC
Policies & Standards
Define
Distribute
Respond
Measure
SAP Policy Management enables the creation of policies in logical hierarchies.
Scope, Documentation and Source are all defined.
Distribution is achieved using SAP Adobe Interactive Forms which reply directly back into the solution.
Segregation of Duties
Processes
Roles
Permissions
Analyse
Using the SAP HR structure, identify the role and processes in the organization, where risks of Segregation of Duties violations can or will occur.
Role Management can be achieved through easy role-mapping functionality and a link to Process Controls.
Enterprise Risk Management
Identify
Assess
Mitigate
Report
An Enterprise Risk Management application that enables the identification of risk, the assessment of various parameters and the mitigation of risk through policies, control and risk treatments.
Risk reporting is then enabled from within SAP GRC.
Process Assurance
Measure
Alert
Remediate
Re-Measure
Achieve Assurance that organisational processes, as defined in SAP ERP, are working, efficient and effective.
This is achieved through continuous automated and/or manual testing of controls related to defined sub-processes.
Workflows enable remediation by control owners ensuring long-term success.
Insert Text
Insert Text
Insert Text

6. Why Integrate SAP GRC Policies & Standards Enterprise Risk Management
Process Assurance
Segregation of Duties
Procure to Pay
Invoice Verification And Approval Workflow Policy
Financial loss and VAT non-compliance through the processing of 2 invoices
Process: Invoice Verification
To identify duplicate invoices to prevent duplicate payments
Invoice and Payment SOD:
Identify where the user creates an invoice and also releases the payment.
Hire to Retire
Employee Master Data Management Policy
Financial Loss Through Payment to Ghost employees
Process: Employee Detail Maintenance
To monitor the employee master data to ensure that only existing employees are remunerated
Master Data and Payments SOD:
Identify users that maintain employee master data and make salary payments
Order to Cash
Timeous Termination Of Employees
Policy
Financial Loss through the creation of fictitious customer and sale orders
Process: Customer Detail Maintenance
To monitor the process of maintenance of the employee master records to ensure they are valid accurate and complete
Master Data and Sales SOD:
Identify users who maintain the customer master data and initiate sale order
Content page 1

7. Supply Chain Management
Controls Across the Business
ERP System
Supply Chain Management
Materials Management
Finance
Sales & Distribution
Logistics
O2C Process
P2P Process
Human Resources
H2R Process
Have you had any major governance issues or audit findings?
Are there any projects on around risk management?
What functions do you have in place as a business for the three lines of defence
Audit? Risk? Compliance? Financial Controls? Policy team? Health and Safety? Quality? Other?
Who are your current external auditors?
What technology do you use?
Do you use excel, word, or other disparate tools?
What reports do you provide for governance and at what levels?

8. EOH SAP GRC Accelerator
The Value Roadmap

9. Approach for the GCR Accelerator
1. Project initiation and scope confirmation
2. Baseline installation and configuration
3. Scripted demonstration in QA
4. Migration to Production and Go-live
5. Remote Post Go-live Support
Content page 1

10. Some of our Clients
Have you had any major governance issues or audit findings?
Are there any projects on around risk management?
What functions do you have in place as a business for the three lines of defence
Audit? Risk? Compliance? Financial Controls? Policy team? Health and Safety? Quality? Other?
Who are your current external auditors?
What technology do you use?
Do you use excel, word, or other disparate tools?
What reports do you provide for governance and at what levels?

11. What our Customers Say Click to edit Master text styles
“In SAP we found the enabling technology to support us. In EOH we found a technology partner to compliment our Risk Management objectives; they understood the business processes in depth and had the technical skills to achieve our goals.”
Rian Strydom | General Manager: Governance, Risk & Compliance
Click to edit Master text styles
“We chose EOH to implement the SAP GRC Risk Management module for 2 reasons; firstly their unrivalled and in-depth domain knowledge of the Risk Management profession and secondly their technical skills in the SAP application. The EOH project personnel were instrumental in achieving a successful implementation, they went the extra mile to ensure our objectives were achieved.”
Bright Mtemererwa | Group Risk & Sustainability
Click to edit Master text styles
Contents page 2

12. Next Steps
EOH and SAP to share all information as per the discussions had
Demonstration videos to be shown to customer
EOH and SAP to provide a proposal for customer review
Should anything further be required please contact us
EOH SAP GRC BU Head
Name: Justin Clarke
Contact Number: