Your SAP Resource  »  Publications  »  SAP Experts  »  GRC Expert Online

Log In  |  Help

GRC Expert

SAP governance, risk and
compliance — concepts, technology,
and best practices

Part of the
SAP Experts
knowledgebase

Subscribe/Renew Now

Browse by Category  |  Advanced Search »

Go

Home

Knowledgebase Overview

Article Index  |  PDF

Free Sample Article

Frequently Asked Questions

Downloads

Webinars

GRC 2010 Conference

SAP Insider Event Calendar

SAP Experts Knowledgebases

About Us

Contact Us

Categories  »  Compliance

Compliance

  1. 10 Best Practices for Enforcing Data Security, Control, and Consistency in the Software Logistics Process
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (March 2010)

    Learn important best practices, tips, and guidelines that are invaluable for ensuring that the process of making changes and transporting changed data in the SAP ABAP system is well secured against possible security threats and risks.

  2. 3 Best Practices for Reporting GRC Issues to SAP GRC Support
    by Jayne Gibbon, Director of GRC Support, SAP

    See the best ways to communicate your GRC support issues with the SAP GRC Support team, including what information to present and how to present it.

  3. 3 Steps to IFRS Conversion for Small and Medium Entities
    by Judith M. Myerson, President/Owner (January 2010)

    Follow this process to help you analyze business impacts and identify, prioritize, and monitor risks if you are a small (fewer than 100 employees) or medium-sized (100 to 500 employees) company converting to International Financial Reporting Standards.

  4. 5 Tips for Securing Communication Between SAP Systems and External Programs
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (July 2010)

    Learn how to prevent the illegal and malicious starting of external programs in your SAP environment.

  5. 6 Controls to Make Your Company’s Order-to-Cash Processes More Secure
    by Anurag Barua, Senior Manager (April 2010)

    Learn a few selected application controls in the order-to-cash area and their importance from an audit perspective. Understand mitigation measures in case these controls are inadequate.

  6. 6 Tips for Going Global with Extra Savoir-Faire
    by Charles Eubanks, Senior Manager, SAP HR Integration, ARINSO International

    Whether you’re just beginning a global project or are already supporting SAP HR in multiple countries, this advice will help keep your project on the right track.

  7. 6 Tips for Improving Reporting Governance
    by Anurag Barua, Senior Manager (September 2009)

    Make sure your reporting is accurate by following these six surefire tips for reporting governance.

  8. 7 Standard SAP Reports for Audit Information
    by Anurag Barua, Independent Consultant

    Many SAP users think that only third-party tools can carry out a security audit of your SAP system. If you know where to look in your SAP system, you can find some hidden gems that provide you with information that auditors want. See seven standard reports that you can use to better prepare for your audit.

  9. 8 Steps to Document Controls for Sarbanes-Oxley Compliance
    by Bryan Wilson (CPA, CISA), Principal, Acumen Control ERP, Inc

    As an operational specialist, you might not have as much experience documenting internal controls as your counterparts in finance. The author of this article provides a step-by-step approach for the operational side of the business and explains the differences among the different types of controls.

  10. A Checklist for an SAP Solution Manager System Audit
    by Anurag Barua, Senior Manager (April 2009)

    SAP Solution Manager's features make it a challenging candidate for a system audit and review. Use this matrix to establish your approach to auditing SAP Solution Manager.

  11. A Checklist for Developing Your Global Template
    by Sameer Page, Program Manager (March 2009)

    Discover the components of a global template and the advantages of implementing it across an enterprise.

  12. A Technical How-To for Installing SAP BusinessObjects Sustainability Performance Management
    by Raj Behera, Director, Regional Implementation Group (RIG), SAP GRC (July 2010)

    SAP BusinessObjects Sustainability Performance Management deals with the measurement of performance data ensuring emissions tracking and reporting, aligning sustainability-related topics with corporate strategies. Gain some technical insight into this solution, such as how to deploy it, where to find the software if you have the license, and the minimum requirements for your landscape. Then learn how to configure the setup of SAP BusinessObjects Sustainability Performance Management for end-user access.

  13. Accelerate Your Closing Process with mySAP ERP New G/L and New Functions
    by Aylin Korkmaz, Manager, Accenture UK

    Fast period closing enables quick identification, investigation, and elimination of accounting problems. Here's how to take advantage of mySAP ERP's new G/L and new functions in accounting for your fastest closings yet.

  14. Address Problem Users for Compliance
    by Dylan Hack, SAP Compliance and Authorizations Consultant (November 2008)

    Discover how to easily build a role for technical batch or interface users who are very difficult to track — even if they have held SAP_ALL in production for years.

  15. Analyze Segregation of Duties in Legacy Systems with Compliance Calibrator
    by Jayne Gibbon, SAP

    Starting with Compliance Calibrator 5.1, and continuing with versions 5.2 and 5.3, you can connect Compliance Calibrator to non-SAP systems to perform Segregation of Duties analysis. See how to set up Compliance Calibrator to do this in six steps.

  16. Ask the SAP GRC Expert: Demystify Foreign Currency Valuation with F.05
    by Drs. Stef Cornelissen, SAP Consultant, Proxyon B.V.

    If your company has open items in foreign currencies, you need to know how exchange rate fluctuations are affecting your bottom line. Learn the ins and outs of a highly useful but sparsely documented transaction and gain a complete view of currency valuation.

  17. Audit-Ready Your Segregation of Duties Remediation Process with User Remediation in RAR
    by Jayne Gibbon, Director of SAP GRC Support, SAP (October 2009)

    Discover key tools and process steps to assist in the remediation of risks at the composite role and user level identified by SAP BusinessObjects Access Control Risk Analysis and Remediation.

  18. Automate Global Import/Export Processes Across Your Enterprise with SAP GTS
    by D. Rajen Iyer, SAP America, Inc.

    For many companies, import/export trade processes are conducted manually. Automating these processes will reduce errors and reduce costly maintenance. SAP has introduced Global Trade Services (GTS), an application that runs on the NetWeaver platform, to help automate processes whether they run within or outside the R/3 enterprise structure. Get an inside look at GTS’s capabilities with this article.

  19. Automate Online Export Declarations to Germany with ATLAS
    by Venkat Jammi, Lead Consultant, and Rajen Iyer, CPIM, PMP, Krypt (July 2010)

    Understand ATLAS, the online automated export declarations system for outbound shipments from Germany, including the system architecture and how to implement it. Walk through the configuration and associated system setup to enable the process and the communication.

  20. Automate Your SoD Review with SAP BusinessObjects Access Control 5.3
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (January 2010)

    The Segregation of Duties (SoD) Review feature in SAP BusinessObjects Access Control 5.3 allows for an automated and decentralized SoD review by business managers or risk owners. The SoD Review takes the SoD violations detected during a batch risk analysis and organizes their resolution in a request-based approval workflow. Reviewers can assign mitigation controls for users with SoD violations or request removal of detected violations from the security administrators in the same workflow. The article comes in two parts. In part 1, follow a detailed process flow during an SoD review, its business benefits, and recommended use of various features. Part 2 focuses on configuration of the SoD Review in the system.

  21. Automate Your SoD Review with SAP BusinessObjects Access Control 5.3 — Part 2
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (January 2010)

    The Segregation of Duties (SoD) Review feature in SAP BusinessObjects Access Control 5.3 allows for an automated and decentralized SoD review by business managers or risk owners. The SoD Review takes the SoD violations detected during a batch risk analysis and organizes their resolution in a request-based approval workflow. Reviewers can assign mitigation controls for users with SoD violations or request removal of detected violations from the security administrators in the same workflow. The article comes in two parts. In part 1, I went through a detailed process flow during an SoD review, its business benefits, and recommended use of various features. Part 2 focuses on configuration of the SoD Review in the system.

  22. Avoid Audit Problems by Building Controls as Part of Your Implementation Life Cycle
    by Steve Biskie, Founder, ERPAuditSolutions.com (June 2009)

    To have an efficient and effective control design process, certain risk and control activities need to occur during the implementation process. These activities reduce the potential for audit issues and minimize future rework. By following this strategy you significantly increase the likelihood of having a successful implementation and a pain-free audit.

  23. Behind SAP’s Internal IFRS Project
    by Davin Wilfrid (September 2009)

    Like most global businesses with subsidiaries in dozens of countries, SAP’s reporting requirements are daunting. The looming switch to IFRS in the US has complicated things even further, requiring SAP to implement a parallel accounting structure to account for both US GAAP and IFRS reporting rules. See how the company was able to manage this complex project successfully, and how it plans to build on IFRS for the future.

  24. Benchmark SAP Application Controls to Increase Testing and Documentation Efficiency
    by Richard Castle, Executive Director, Ernst & Young LLP

    See how to use your SAP system’s table logging functionality to support a benchmarking strategy for application controls.

  25. Best Practices for Secure Programming in SAP NetWeaver
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (August 2009)

    Review best practices that you should employ in application development with particular emphasis on the functionalities available in SAP NetWeaver that guarantee secure programming.

  26. Build a Dashboard for Management of Internal Controls
    by Dr. Karol Bliznak, SAP AG

    Managers often struggle with the timely availability of compliance-related data and the way the information is visualized for analysis and presentation purposes. You can eliminate these problems by following a four-step process to build a management dashboard for SAP's Management of Internal Controls (MIC) application. You can also use this procedure to build dashboards for other SAP applications and solutions.

  27. Build and Implement a Rock-Solid Compliance Framework for Your IFRS Conversion Project
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (July 2009)

    Many countries already operate under International Financial Reporting Standards (IFRS), while the US, among other countries, may be joining the fray. To simplify the conversion from your local reporting standard to IFRS and better manage the associated compliance risk, organizations must adopt strategies and best practices based on a proven compliance framework.

  28. Build Bullet-Proof Testing Strategies to Comply with Legal and Industry Regulations
    by Mitresh Kundalia, Director, SAP Practice, Quality Systems & Software

    Organizations need to design and develop effective testing strategies to comply with Sarbanes-Oxley and industry-specific requirements. These testing strategies and methodologies need to cover both normal day-to-day maintenance of business scenarios and major initiatives such as upgrades, fresh implementations, and more. See how to build and follow a five-phase plan to perform testing on your system and ensure compliance.

  29. Combat Chaos with a Lock-Down Security Policy in 12 Key Areas of Your SAP Environment
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (June 2009)

    Security policies and procedures should be a central concern of all employees of an organization. Review important areas of the SAP ERP system that has to be driven by effective security policies.

  30. Combine SAP Strategy Management and GRC Risk Management for Risk-Intelligent Strategic Execution
    by Dr. Karol Bliznak, SAP AG

    In most organizations, strategic management and risk management are completely separate processes. As a result, it’s often difficult to track strategic goals over time while assessing the risks that might affect strategic initiatives. With an integrated approach to strategy and risk management, you can ensure that business owners are focusing on the right initiatives both to drive execution of strategy and manage risk.

  31. Communicate with Customs Using AES in SAP GRC Global Trade Services
    by D. Rajen Iyer, CPIM, PMP, Kryaa

    Set up SAP Global Trade Services Customs Management to take advantage of Automated Export System communication with US Customs and Border Protection.

  32. Comply with Sarbanes-Oxley Regulations by Locking Posting Periods in CO-PA
    by Jeffrey Holdeman, Principal Solutions Consultant, SAP

    Discover how to use the Profitability Analysis (CO-PA) valuation enhancement to lock posting periods against changes in CO-PA data. See also how this solution helps meet Sarbanes-Oxley compliance for internal controls on CO-PA reporting.

  33. Comply with the New EEO Regulations for the 2007 Filing
    by Danielle Larocca Signorile, Vice President of HR, Information Systems, Compass Group, The Americas

    A new US Equal Employment Opportunity (EEO) law change that became official in December 2005 requires you to add two different SAP classifications for race and job. To prepare to implement these changes in 2007, you need to map from the old job codes to the new and use a collection method to re-collect the race data and load it into your SAP system.

  34. Configure and Implement the Proper Internal Controls Up Front for an Easier Audit
    by Steve Biskie, Founder, SAPAuditSolutions.com (December 2008)

    Having to go back and change your SAP system or your related business processes to deal with audit concerns takes time away from your daily operations and results in unnecessary distractions. By configuring your SAP system appropriately and designing your related business processes to effectively address your business risks, you can save significant effort. This article provides an overview of how to set up your SAP system properly the first time. Learn how understanding common business risks and typical audit concerns and carefully managing the SAP implementation process to account for these risks and concerns can eliminate nearly 90% of all audit findings.

  35. Corporate Governance in the US, Singapore, and India: How Does Sarbanes-Oxley Compare?
    by Vivek Sadhale, Company Secretary and Head – Legal, Vikas Agarwal, Deputy Manager – Secretarial, Amit Atre, Assistant Officer - Secretarial, Persistent Systems Limited (March 2009)

    Many parts of corporate governance codes are similar from country to country. The United States’ Sarbanes-Oxley Act is the most well-known code, and many countries’ efforts toward corporate governance resemble it. See how India and Singapore — two countries in much different socioeconomic climates than the US — handle corporate governance in comparison to the US.

  36. Create a Centralized Control Management System by Integrating Access and Process Controls
    by Raj Behera, Manager, Regional Implementation Group (RIG), SAP GRC (May 2009)

    See how to integrate SAP BusinessObjects Access Control and SAP BusinessObjects Process Control. You can optimize reporting practices, consolidate segregation of duties issues, and troubleshoot any potential problems using these two applications.

  37. Create a Control Dashboard to Monitor Your Internal Controls
    by Taylor Erickson, Manager, BearingPoint, Inc.

    It is vital to track user exits to ensure the financial transparency of your company. The author introduces a programmable "control dashboard" that will enable you to recognize, document, and help audit the user exits in your company's system.

  38. Create and Monitor a Risk-Adjusted Strategy for the Post-Crisis Economy
    by William Newman, Managing Principal, Newport Consulting Group (January 2010)

    As part of its positioning for the corporate boardroom set of enterprise performance management applications, SAP BusinessObjects Strategy Management enables decision makers to access what is happening in real time in the organization, while leveraging any existing back-office enterprise software investments. Learn how to address risk in the development of go-forward strategies in the post-crisis economy through the features available in SAP BusinessObjects Strategy Management.

  39. Define Risks and Functions with Risk Analysis and Remediation Rule Architect
    by Jayne Gibbon, Director of SAP GRC Support, SAP (April 2009)

    Discover the makeup and functionality of Rule Architect within SAP BusinessObjects Access Control Risk Analysis and Remediation.

  40. Demystify Authorization Error Analysis in Transaction SU53
    by Anurag Barua, Senior Manager

    Analyze access considerations for your users and transaction SU53. Examine its capabilities as compared to other transactions and how auditors perceive it when they are looking at your organization’s system.

  41. Discover the Financial Aspects of Trade Compliance with GRC Global Trade Services
    by Rajen Iyer, Practice and Program Head, Kryaa

    Although SAP GRC Global Trade Services works very closely with logistics and interfaces with supply chain processes, it affects Financial Accounting in a number of ways as well. Learn how the functionality affects finance functionality and features directly and indirectly.

  42. Distribute Critical Data Among Multiple SAP Systems by Using Change Pointers
    by Rajen Iyer, Practice and Program Head, Kryaa (June 2009)

    Using change pointers allows you to select exactly what data you want integrated systems to communicate to each other. See an example of the functionality with SAP ERP Central Component and SAP BusinessObjects Global Trade Services.

  43. Easily Maintain Workers’ Compensation Classification Data for the US
    by Dawn Burns and Brad Walters, Senior Consultants, Electronic Data Systems

    In this overview of US-based workers’ compensation, learn about the general functionality that SAP provides to keep your company in compliance. See how to set up the premium deductions and the workers’ compensation codes in Organizational Management.

  44. Ensure Business Access Segregation by Automatically Generating SAP NetWeaver BI Analysis Authorizations
    by Jonathan D. Griffith, SAP NetWeaver BI Subject Matter Expert and BI Solutions Center Tools Team Lead, FirstEnergy Corp.

    Learn about an alternative method for creating and maintaining complex business access segregation rules that does not involve having your employees manually assign and revoke SAP NetWeaver Business Intelligence roles with every employee job transfer. Through the use of analysis authorizations and security data models, you can update your SAP NetWeaver BI security automatically to reflect the latest changes to users as well as business rules governing data access.

  45. Ensure Success in Your Next SAP Audit with Standard Audit Features
    by Bhavesh Bhagat, President, and Darshan Shah, SAP GRC Solution Management Analyst, EnCrisp LLC (April 2010)

    Conduct technical assurance audits using robust features within your existing SAP ERP implementation. Discover undocumented tips for leveraging key reports and controls to gain transparency and the necessary evidence trail to perform rigorous system and business process audits.

  46. Enterprise Role Management — The Way to Compliant Role Design
    by Frank Rambo, Director, Regional Implementation Group (RIG) GRC EMEA, SAP BusinessObjects (March 2009)

    Enterprise Role Management helps streamline your role design process with a pre-defined, customizable design methodology that guides you through role definition, authorization maintenance, risk analysis, role approval, and role generation in your SAP back-end systems. It also ensures Sarbanes-Oxley compliance of your roles.

  47. Five Keys to a Successful US Payroll Year-End
    by Steve Bogner, Managing Partner, Insight Consulting Partners

    Implement these five best practices when you prepare for year-end US federal, state, and local tax reporting requirements. Combined with SAP’s Payroll functionality, they will help you plan your year-end Payroll processes.

  48. Get Your System Clean with Compliant User Provisioning
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (January 2009)

    Audit-proof your daily user management with SAP GRC Access Control’s Compliant User Provisioning capability. Learn about its main features and see an example of how to set it up for requesting, approving, and providing access to your business target systems.

  49. Get Your System Clean with Risk Analysis and Remediation
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC

    Become and stay Sarbanes-Oxley compliant with Risk Analysis and Remediation. Learn about its main features, technical architecture, and setup.

  50. GTS Import Functionality Makes Clearing Customs a Snap
    by D. Rajen Iyer, SAP America, IncConsulting Inc.

    Importers must monitor and coordinate aspects of the importing process such as permits and admissibility requirements. Find out how SAP Global Trade Solution import functionality helps importers meet changing regulations, inspections, and other demands.

  51. Handle Partially Reclaimable VAT with Pro-Rata VAT Functionality in Your SAP System
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting (October 2009)

    Many organizations in the EU use Value Added Tax (VAT) on certain sales. However, not all sales allow VAT charges. If you’re a company providing products that are both VAT-eligible and VAT-ineligible, how do you account for this in your system? See how to set up and customize pro-rata VAT in your SAP system.

  52. How a Film Company Uses SAP NetWeaver BW for Closed-Loop Planning
    by Hari Srinivasan, Senior Principal, Inforte (March 2009)

    Follow the setup for building and executing controls in SAP NetWeaver BW in the context of a real-life media-specific business process.

  53. How PCI Security Compliance Requirements Affect Your SAP System
    by Eric Bushman, Director of SAP Solutions, Paymetric, Inc.

    Card issuers are requiring merchants, banks, service providers, and card processors to take stringent measures to protect stored data. Establishing user security roles and minimizing end-user access to non-encrypted card data within your SAP system is essential for compliance.

  54. How SAP ERP Combats the Challenges of Global Accounting and Financial Reporting Standards
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (December 2009)

    Review some SAP ERP solutions, functionalities, and capabilities that you can use to meet the challenges of specific International Financial Reporting Standards (IFRS) and International Accounting Standards (IAS) requirements, including ones that cover revenue, accounting policies, operating segments, and more.

  55. How to Build and Use Controls for Closed-Loop Planning Processes in SAP NetWeaver BI
    by Hari Srinivasan, Principal, Inforte

    Learn how to build controls and create a number of unique roles in SAP NetWeaver BI or BW in the context of a consumer packaged goods business process.

  56. Identify Fraud Risks with Forensic Audit Queries
    by Bryan Wilson, President, Acumen Control ERP, Inc.

    Audit committees, management, investors, regulators, and external auditors expect your business process controls to be effective, efficient, and testable. See how to extend your GRC functionality to identify control exceptions in your SAP system by locating data in SAP tables and running forensic audit queries.

  57. Identify Non-Compliant Transactions Faster and Reduce Costs with GTS Business Package
    by D. Rajen Iyer, SAP America, Inc.

    Trade services representatives and compliance managers need a variety of reports for screening and monitoring business partners and countries under embargoes as well as for general importing and exporting checks. With the GTS Business Package, they can stay current with circumstances related to their business partners, transactions, and verify sanctioned or embargo situations as well as retrieve export and import data.

  58. IFRS Adoption for US Companies: A Primer
    by Anurag Barua, Senior Manager (July 2009)

    Worried about the impending US conversion to International Financial Reporting Standards (IFRS)? See some quick hints about things you should know and places you can look for information as the landscape changes.

  59. Implement 5 Key Controls to Mitigate Risk in Your Financial Closing Process
    by Anurag Barua, Senior Manager

    See five scenarios that commonly produce risk — and how to address them with configuration.

  60. Improve Operational Effectiveness by Properly Loading and Monitoring SPL Data
    by Rajen Iyer, Krypt / Kryaa (September 2009)

    Review the operational considerations and the effective use of sanctioned party list functionality in SAP BusinessObjects Global Trade Services. See how to index business partner records effectively and manage your content and operational activities.

  61. Improve SPL Screening Performance to Ensure Compliance with Your Global Business Partners
    by Rajen Iyer, Krypt / Kryaa (August 2009)

    A sanctioned party list (SPL) screening involves screening your business partners against the respective government-published denied party list (DPL). You can set up SAP BusinessObjects Global Trade Services to ensure that your system keeps your legal business partners in order.

  62. Improve Traceability with SAP Solution Manager
    by D. Russell Sloan, IBM Global Business Services, Implementation and Governance Specialist — SAP Solution Manager (July 2010)

    With the advent of Sarbanes-Oxley and other compliance rules, the need for full traceability across a solution development effort is expanding far beyond just the pharmaceutical industry. SAP Solution Manager has a collection of features that enable your project to provide end-to-end visibility to all aspects of solution development and delivery. From initial design through final testing and signoff, SAP Solution Manager allows you to link and trace all the activities, documents, and technical objects needed to deliver your solution.

  63. Improve Your Authorization Concept by Deriving Roles in Enterprise Role Management
    by Massimo Manara, SAP Security Consultant, Aglea s.r.l. (May 2010)

    Enterprise Role Management (ERM) helps your role design process with a predefined, customizable design methodology that guides you through role definition, authorization maintenance, risk analysis, role approval, and role generation in your SAP back-end systems. During role maintenance, you can manage massive role derivation and adopt a mapping for speeding up this process.

  64. Improve Your Compliance by Using VSOE-Based Revenue Recognition
    by Akhilesh Mittal, Consultant, Infosys Technologies Ltd.

    You can break down revenue recognition into two considerations — when to recognize the revenue and how much to recognize. Discover the procedure in your SAP system to apply the vendor-specific objective evidence-based fair value process to address these issues. Determine how much revenue to recognize when individual software elements are bundled in a product.

  65. Improve Your Corporate Sustainability Reporting with SAP BusinessObjects Sustainability Performance Management
    by William Newman, Managing Principal, Newport Consulting Group (November 2009)

    Walk through the key features of SAP BusinessObjects Sustainability Performance Management and see how you can use it along with other parts of your SAP system for your corporate sustainability reporting needs.

  66. Increase the Success Rate of Your Strategies and Initiatives through an Enterprise Risk Management System
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (September 2010)

    Many risk managers complain about a lack of enterprise insight and alignment of risk management to the strategic objectives of their organization. With a rather manual and inconsistent approach based on emails and spreadsheets, they often fail to oversee the impact of risks to the strategic goals and whether appropriate risk responses were implemented to mitigate risks. SAP BusinessObjects Risk Management 3.0 is an enterprise-scalable, near real-time, integrative solution to align enterprise risk management with corporate strategy initiatives, and effectively mitigate risk. Learn how it optimizes corporate performance, maximizes visibility of risk impacts and effectiveness of risk responses, and sends out early alerts through automated monitoring of key risk indicators.

  67. Integrate Access and Process Controls in the Latest Releases of SAP BusinessObjects Solutions for GRC
    by Raj Behera, Manager, Regional Implementation Group (RIG), SAP GRC (June 2009)

    SAP BusinessObjects Access Control’s Risk Analysis and Remediation (RAR) capability generates the rule library for segregation of duties and performs the access risk analysis for the user. SAP BusinessObjects Process Control manages the controls for each business process. Integrating the two applications allows you to control both of these functions from SAP BusinessObjects Process Control.

  68. Integrate the Four Capabilities of SAP GRC Access Control
    by Jayne Gibbon, Director of SAP GRC Support, SAP

    Learn about integration points of the four capabilities of SAP GRC Access Control in one place.

  69. Internal Controls: The Journey From Compliance to Risk Management
    by Gary Dickhart, SAP

    See how to make compliance more operational with a more preventative, integrated approach that emphasizes risk management over compliance. By embedding more controls into this approach, your organization achieves greater efficiency and lower compliance testing costs than in the more manual report and review model that many companies use.

  70. Is Your Foreign Currency Revaluation FASB 52 Compliant?
    by Susanne Finke, SAP Consultant, ZANN Consulting Inc.

    Compare methods of configuring and executing foreign currency revaluation in your SAP system to determine which method best suits your needs while meeting US Financial Accounting Standards Board Statement No. 52 (FASB 52) requirements, which govern foreign currency revaluation.

  71. Keep Track of Components with the Reuse Library
    by Anurag Barua, Manager, SAP Application Support, The Washington Post

    The reuse library is enhanced starting with Enterprise Release 4.7, making it a handy mini-knowledge warehouse that can complement other knowledge management tools.

  72. Keep Up with Multiple Regulations by Controlling Multiple Data Retention Policies
    by Judith M. Myerson, President/Owner (November 2009)

    Follow four steps to help you identify, prioritize, and plan a data retention policy.

  73. Keep Your Order-to-Cash Documents’ Integrity Intact within a Global Trade Compliance Program
    by William Newman, Managing Principal, Newport Consulting Group (August 2010)

    When considering standard and non-standard order-to-cash processes, you can employ key workarounds to preserve standard SAP documents as the system of record. Understand the document flow of an order-to-cash process within a global trade operation, as well as the effects on plant operations. Then step through four example adjustments you can make to your order-to-cash process that keep you compliant with global trade policies and regulations.

  74. Keep Your Web Applications Sarbanes-Oxley-Compliant by Running CUP for SAP NetWeaver Portal
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (October 2009)

    SAP BusinessObjects Access Control 5.3 can connect to the SAP NetWeaver Portal for automated user provisioning. Requesters can use the Compliant User Provisioning (CUP) product capability to request access to SAP NetWeaver Portal and select group memberships, portal roles, and User Management Engine (UME) roles. During the approval process, you can execute a risk analysis on the level of iViews and UME actions included in the requested roles to ensure Sarbanes-Oxley compliance with respect to the Web applications accessible through SAP NetWeaver Portal.

  75. Learn the SAP NetWeaver Platform Layer Configuration for GRC Process Control 2.5
    by Raj Behera, Manager, Regional Implementation Group (RIG), SAP GRC

    Discover the ways SAP GRC Process Control interacts with SAP NetWeaver to give you improved means of analysis and presentation formats, including printing, download, user interface, and graphics features.

  76. Make Identity Management Sarbanes-Oxley-Compliant by Leveraging Integrated SAP Solutions
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (June 2009)

    Efficient processes for identity management (IDM) are a challenge to many companies — in particular when access- and authorization-related risks must be managed and taken under consideration prior to provisioning access privileges. SAP BusinessObjects Access Control 5.3 comes with a Web service-based interface intended to provide risk analysis and mitigation features to IDM solutions. See how to integrate one such solution, SAP NetWeaver Identity Management 7.1, with SAP BusinessObjects Access Control 5.3 to obtain a highly cost-efficient solution for compliant IDM.

  77. Make Your Dashboards Secure: Strategies and Options
    by Anurag Barua, Senior Manager (December 2009)

    While there is widespread recognition of the value that dashboards generate, there is also an incipient apprehension that they are not secure. Walk through some ways you can validate the security in dashboards using Xcelsius as an example, while maintaining the user-friendliness that is expected in a dashboard.

  78. Manage and Improve Your Sustainability Performance Efficiently
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (June 2010)

    SAP BusinessObjects Sustainability Performance Management helps organizations track and communicate sustainability performance, set goals and objectives, and monitor activities – all while helping to reduce the time and cost spent collecting data and compiling disclosures. Learn more about the business case for this application and how it works on a high level. Understand SAP’s two-fold role in the sustainability area as exemplar and enabler.

  79. Manage Multiple Compliance Initiatives Effectively Leveraging Shared Master Data
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (March 2010)

    When different teams work with different procedures in different software solutions to address the many internal policies and external regulations to which a company is subject, it leads to inconsistent master data, unnecessary costs, and a lack of management visibility. SAP Business Objects Process Control 3.0 comes with a global master data catalogue and a multiple compliance framework to provide an efficient solution. It allows for managing compliance with respect to multiple regulations in a unified manner in a single system using shared master data. Learn more about how it works and how to set it up in the system.

  80. Meet Your Complex ITAR Requirements Using Agreement and License Types
    by Rajen Iyer, Practice and Program Head, Kryaa

    See how to set SAP GRC Global Trade Services to use the appropriate agreement and license type for your imports and exports.

  81. Mitigate Residual Risks When Using SAP’s Green Software Solutions
    by Judith M. Myerson (April 2010)

    Learn how to mitigate residual risks of carbon emissions when using SAP’s green software solutions. Find out more about SAP Carbon Impact on-demand service, how to visualize and compare carbon footprint data with dashboards, and how to mitigate sustainability residual risks.

  82. Monitor Alerts in Risk Analysis and Remediation
    by Jayne Gibbon, Director of SAP GRC Support, SAP (November 2008)

    See the different kinds of alerts in GRC Access Control Risk Analysis and Remediation and how to configure them.

  83. Monitor Compliance with the New US DOL's FairPay Overtime Initiative
    by Danielle Larocca Signorile, Senior SAP Consultant

    To ensure compliance with the US Department of Labor’s (DOL’s) new FairPay law, your company must identify workers who earn less than $23,660 per year or $455 per week to confirm that they are configured to be eligible for overtime. The author shows you how to set up an audit to identify these employees using SAP Query.

  84. Monitor Sensitive Fields with R/3's Dual Control Functionality
    by Drs. Stef Cornelissen, SAP Consultant, Proxyon B.V

    The standard SAP dual control principle imposes segregation of duties for changes to sensitive fields while allowing changes to be made by one person to non-sensitive fields.

  85. Optimize Application Integration by Running Risk Analysis and Remediation for SAP NetWeaver Portal
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (September 2009)

    The Web-based environment of SAP NetWeaver Portal provides business users in your organization secure access to a wide array of SAP and non-SAP applications, information, and services, such as SAP ERP, analytics, business intelligence, and document repositories. The diversity of content delivered to your business users through SAP NetWeaver Portal may come with user access-related risks to analyze, monitor, and mitigate. Learn how to integrate SAP NetWeaver Portal into SAP BusinessObjects Access Control 5.3 and include it in your risk analysis and risk mitigation.

  86. Optimize Data Management in All Phases of Your SAP Implementation
    by Gerry Miller, Retired Principal, Darwin Deano, Senior Manager, and Lindsey Berckman, Consultant, Deloitte Consulting LLP (June 2010)

    Poor data management can lead to many problems, from incorrect data, to a lack of integration, to bad analysis. Learn ways an effective data management strategy can help you in your efforts to optimize your system’s performance while increasing your compliance and reducing cost.

  87. Overcome a Top Auditing Issue with Superuser Privilege Management
    by Frank Rambo, Director, Regional Implementation Group (RIG) GRC EMEA, SAP BusinessObjects (May 2009)

    Procedures for granting emergency access to SAP systems often raise concerns during a system audit. SAP BusinessObjects Access Control can provide an effective solution. The Superuser Privilege Management (SPM) capability manages access to emergency users in a secure and auditable manner. See how it works in the SAP back end and the different reporting measures you can take.

  88. Part 1: Handle Foreign Currency Risk with SAP Exposure Management
    by Gopa Kumar, Senior Consultant, and Ajay Furtado, Principal Consultant, Fourth Signal (December 2008)

    Discover the features in SAP Exposure Management that help you mitigate risk and maintain hedge procedures in part 1 of a two-part series on the functionality.

  89. Part 2: Handle Foreign Currency Risk with Exposure Management
    by Gopa Kumar, Senior Consultant, and Ajay Furtado, Principal Consultant, Fourth Signal (February 2009)

    Analyze and properly maintain your exposures in SAP Exposure Management before transferring them to SAP Hedge Management.

  90. Part 2: Set Up Preference Processing to Delineate Customs Tariff Priorities and Manage Risk with Global Sourcing
    by Rajen Iyer, Practice and Program Head, Kryaa (December 2008)

    See how to set up and perform preference processing within your global customs practices through your supply chain in both SAP ERP Central Component and SAP GRC Global Trade Services. Preference processing allows you to capture and determine the duty preference, drawback, and allowance based on the country of origin and tariff for the product.

  91. Perform Decentralized Periodic User Access Reviews with SAP BusinessObjects Access Control 5.3
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (August 2009)

    SAP BusinessObjects Access Control identifies and prevents access and authorization risks in cross-enterprise IT systems to prevent fraud and reduce the cost of continuous compliance and control. The User Access Review (UAR) feature of SAP BusinessObjects Access Control 5.3 automates and documents the periodic decentralized user access review by business managers or role owners. It provides a workflow-based review and approval process. Follow a process flow during a UAR to see its business benefits, configuration, recommended usage of the feature, and workflow options.

  92. Perform Hazardous Substance Checks by Integrating Two SAP Systems
    by Rajen Iyer, CPIM, PMP (January 2010)

    Learn how to run hazardous substance checks in SAP Environment, Health, and Safety Management using SAP BusinessObjects Global Trade Services. These checks for hazardous substances help gather information from the logistics system and pass it on to the trade compliance system for early warning, reporting, and appropriate corrective actions. They also help with import and export quantity restrictions, as well as import and export restrictions for products for specific countries of origin.

  93. Prepare for an Audit of Your SAP Systems: What You Need to Ensure a Successful Result
    by Steve Biskie, Founder, ERPAuditSolutions.com (March 2010)

    Learn the fundamentals about auditors and the audit process. See the primary categories of an SAP audit, and tips on some of the more problematic areas within one of these categories — the general computer controls audit.

  94. Prepare Your R/3 System Now for the International Accounting Standards Deadline
    by Drs. Stef Cornelissen, SAP Consultant, Proxyon B.V.

    Impending deadlines for compliance with the International Accounting Standards (IAS) will require hard work on the part of many accountants and R/3 specialists. The problem posed by IAS is that, in most cases, two or more sets of figures have to be managed because of the differences among IAS, US GAAP, and national fiscal reporting.

  95. Prepare Your SAP Financials System for the Single Euro Payments Area
    by Juergen Weiss, SEPA-now Consulting

    Become familiar with the regulations of the Single Euro Payments Area (SEPA) and its consequences for companies doing business in Europe. Get an overview of the SEPA functions delivered within the SAP Financials system and understand for which SAP releases they are available. Learn how you can activate and configure the SEPA functions in the SAP Financials system.

  96. Prepare Your SAP System for Electronic VAT Declaration
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting (August 2010)

    More and more countries in the EU are allowing electronic declaration of Value Added Tax (VAT) reports. See the configuration and technical settings you can implement in your SAP system to enable you to electronically submit VAT to tax authorities.

  97. Program Risk and Change Management for SAP BusinessObjects GRC and EPM Solutions
    by William Newman, Managing Principal, Newport Consulting Group (June 2010)

    SAP BusinessObjects enterprise performance management (EPM) solutions provide a transparent approach to strategic decision making in the organization. Best practices in the implementation of these and SAP BusinessObjects GRC solutions can reduce and mitigate risks during program deployment activities.

  98. Properly Manage Your GRC Initiatives with Standardization, Optimization, and Automation
    by Keerthana Mainkar, Senior Consultant, Enterprise Risk Management Service, Infosys Technologies Limited,
    and Raghupathi Cavale, Associate Vice President, Infosys Technologies Limited


    Effective controls ensure that a company complies with regulatory requirements, but they should also be cost effective. Standardization, optimization, and automation can improve the efficiency and cost-effectiveness of compliance.

  99. Protect Sensitive Personal Information in SAP HR
    by Greg Robinette, SAP HR and HR Privacy Consultant, Robinette Industries and Consulting LLC

    The SAP HR system often inadvertently exposes sensitive information. Follow this procedure to keep employees’ personal information such as Social Security numbers and other unique identifiers out of the wrong hands.

  100. Quick Tip: 10 Best Practices for Developing and Implementing SAP Security Policies
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (June 2009)

    There are good and bad ways of setting up a security policy in your organization. See 10 areas that deserve consideration when making your policy.

  101. Quick Tip: 3 Ways to Save Money While Improving Your GRC Processes
    by Francine McKenna, President, McKenna Partners, LLC

    See three GRC initiatives your company can use to ensure quick, efficient responses to legal requirements.

  102. Quick Tip: 5 Considerations for Outsourcing Your IT Systems Audit
    by Richard Hunt, Director, Turnkey Consulting

    If you’re considering outsourcing your IT systems audit, you need to review important aspects of your relationship with a third-party specialist before moving forward.

  103. Quick Tip: 5 Steps to Accept or Reject Residual Risks
    by Judith M. Myerson, President/Owner (September 2009)

    Follow a five-step process in SAP BusinessObjects Risk Management for evaluating risks that remain in your system and may threaten your compliance with major regulations.

  104. Quick Tip: 6 Tips for Managing Access to Your SAP Transactional Systems
    by Anurag Barua, Independent Consultant

    While you can depend on tools such as SAP’s Audit Information System (AIS) or the SAP GRC technology foundation, the onus of establishing and executing solid security procedures is a joint responsibility of IT and business. Setting policies and obtaining acceptance from all interested parties, if done correctly and in a timely manner, can pay dividends.

  105. Quick Tip: 7 Reasons You Don't Need to Reconcile VAT and Intrastat Reports
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting

    See the differences between Value Added Tax (VAT) reporting and Intrastat reporting that show why it is not possible in some situations to reconcile VAT and Intrastat reports.

  106. Quick Tip: A Little-Known Program Eases Uploads of Commodity Codes
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting

    Save time by maintaining commodity codes using a standard available upload program. By using this program, you can avoid the process of customizing, thus allowing end users to maintain the commodity codes on their own.

  107. Quick Tip: A-123 Requires Federal Agencies to Achieve Compliance Too
    by Anurag Barua, Director of Consulting, EDC Consulting

    Learn about a regulation that federal agencies follow for compliance and risk management.

  108. Quick Tip: Comply with Capital Goods Reporting for France, Spain, and Portugal
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting (June 2009)

    You can set your SAP system to automatically create an adjustment posting to report capital goods invoices separately, as required by some countries.

  109. Quick Tip: EEOC Proposes Employee Classification Updates
    by Danielle Larocca Signorile, Executive SAP Consultant

    The Equal Employment Opportunity Commission (EEOC) has proposed two changes that would affect the way HR professionals classify employees in the United States. The EEOC has proposed that the number of race and ethnicity categories on which employers report be increased to seven, and that the officials and managers category be divided into three subcategories.

  110. Quick Tip: Enable TREX to Enhance Your Sanctioned Party List Search Engine
    by Rajen Iyer, Krypt / Kryaa (November 2009)

    Enable the searching technology available with SAP NetWeaver and exploit the feature within the SAP BusinessObjects Global Trade Services sanctioned party list (SPL) screening. Review the installation options and understand the key features that can enhance your screening. Activate SAP NetWeaver Search and Classification (TREX) to complement your existing SPL screening functions.

  111. Quick Tip: How Can Enhancement Packages Help Compliance?
    by Mitresh Kundalia, Director, SAP Practice, Quality Systems & Software

    See a new way that SAP distributes updates to your system and how you can use them to cut down on testing and resource use.

  112. Quick Tip: How Enhancement Packages Increase Efficiency When Updating Your SAP System
    by Mitresh Kundalia, Director, SAP Practice, Quality Systems & Software

    Learn about four key features of SAP Enhancement Packages.

  113. Quick Tip: Implement SSL Certificates from Visual Administrator to Meet Security Needs
    by Ameya Pimpalgaonkar, SAP NetWeaver Consultant, L&T Infotech (October 2009)

    Follow this process when you want to secure your SAP NetWeaver Portal with SSL quickly, but don’t want to change your corporate portal security settings. This process also avoids certificate conflicts that may arise.

  114. Quick Tip: Improve Project Governance with a RACI Matrix
    by Anurag Barua, Senior Manager

    See how to construct a matrix that governs responsibilities in your organization.

  115. Quick Tip: Mitigating (Human) Resource Risk in an SAP Implementation
    by Anurag Barua, Director of Consulting, EDC Consulting

    See solutions to human resource issues that frequently contribute to risk within your SAP team.

  116. Quick Tip: Safeguard the Message Server via Security-Centric Parameterization
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (February 2010)

    Learn how you can enhance the security of the message server by setting profile parameters appropriately.

  117. Quick Tip: Six Steps to a Successful Localization Project
    by Christine DiLacqua, President, CQ2 Consulting LLC

    If your company conducts business within the Pacific Rim, it is crucial to evaluate your ability to meet local language requirements. With a focus on Asian countries, the author suggests six helpful hints aimed to address the translation concerns of a globalization/localization project.

  118. Quick Tip: Toggle Variant Protection Settings to Allow or Prevent Unauthorized Changes
    by Mitresh Kundalia, Director, SAP Practice, Quality Systems & Software

    Learn how to manage variants so that they are protected from unauthorized changes.

  119. Quick Tip: Upgrading? Three Answers to Your CATT Conversion Questions
    by Mitresh Kundalia, Director, SAP Practice, Quality Systems & Software

    Discover the answers to some common questions about migrating Computer Aided Test Tool (CATT) test cases to extended Computer Aided Test Tool (eCATT) test scripts and leverage your existing investment in CATT.

  120. Reduce Costs for Compliance by Implementing a Risk-Based Internal Control Solution
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (February 2010)

    Costs for compliance and fraud prevention have risen significantly in recent years and with the current economic situation we’re likely to manage more regulations in the future, further driving costs up. Companies relish efficiency in the GRC space to garner the true benefits of compliance. One means of more efficient compliance is an integrated solution called Risk-Based Internal Control, which helps ensure continuous compliance with regulatory requirements and company policies including government mandates, industry standards, and internal policies.

  121. Reduce Costs in Compliance Management with a Top-Down, Risk-Based Scoping Approach
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (April 2010)

    With the requirement of identifying and assessing the design and operating effectiveness of internal controls many companies have ended up producing too much documentation and performing more testing, resulting in increased costs of compliance. Regulatory agencies such as the US Securities and Exchange Commission and the Public Company Accounting Oversight Board (PCAOB) encourage companies to focus on areas where there is the greatest risk that internal controls over financial reporting would fail to prevent or detect a material misstatement in the financial statements. SAP BusinessObjects Process Control 3.0 supports a top-down, risk-based scoping based on Audit Standard 5 by PCAOB. Learn how these scoping instruments work and provide a powerful scoping method when applied in combination.

  122. Reduce Help-Desk Queries with 3 Ways to Improve Access Enforcer Usability
    by Jean-Paul Calabio, Senior SAP Security/GRC Consultant, DGN Technologies, Inc.

    Realize your Access Enforcer ROI by implementing usability best practices that can significantly reduce users’ dependence on the help desk.

  123. Reduce Risk in Your Supply Chain with Supply Chain Performance Management
    by William Newman, Managing Principal, Newport Consulting Group (March 2010)

    As part of its positioning for the corporate boardroom set of enterprise performance management applications, SAP BusinessObjects Supply Chain Performance Management enables full visibility of the value chain using metrics and indicators. Learn how to reduce risks in material and intellectual property flow in your supply chain and create a more effective organization using the features available in SAP BusinessObjects Supply Chain Performance Management.

  124. Reduce Your Procurement Risks with Spend Analytics
    by William Newman, Managing Principal, Newport Consulting Group (February 2010)

    As part of its positioning for the corporate boardroom set of enterprise performance management applications, SAP BusinessObjects Spend Performance Management enables financial and procurement decision makers to have full visibility into both managed and unmanaged spend in the enterprise and throughout the supply chain. Learn how to reduce procurement risks in your supply chain and create a more effective organization in the post-crisis economy through the features available in SAP BusinessObjects Spend Performance Management.

  125. Remediate Issues within Financial or Operational Compliance Initiatives in a Single System of Record
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (August 2010)

    Too often, controls are managed using inadequate tools (e.g., point solutions, document repositories, and spreadsheets) that require too much manual tracking and updating. With SAP BusinessObjects Process Control 3.0, you can streamline issue identification and remediation with automated task notification and workflow-driven remediation plans.

  126. Report Foreign Payments with the SCB Indicator to Comply with Foreign Trade Regulations
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting

    Get an understanding of the State Central Bank (SCB) indicator, which you can use to fulfill legal foreign trade regulations. See an overview of the mandatory and optional customizing settings that are necessary to process the SCB indicator in the correct way in your SAP system. Discover where to find the SCB indicator within the financial transactions in your SAP system.

  127. SAP BusinessObjects Global Trade Services Handles Complex Compliance Checks
    by D. Rajen Iyer, Practice and Program Head, Kryaa

    Discover how to perform an import and export check using SAP BusinessObjects Global Trade Services.

  128. SAP BusinessObjects Planning and Consolidation: How to Effectively Secure Dimensions within a Hierarchy
    by Madhavi Lokireddy, Senior SAP Security Consultant, Capgemini (March 2010)

    Member access profiles in SAP BusinessObjects Planning and Consolidation are a fairly straightforward concept, but it can get tricky when you are assigning read, write, or denied access to individual members in a node and a parent within a hierarchy. Discover some tips to keep in mind while securing hierarchical dimensions.

  129. SAP Closing Cockpit in mySAP ERP Automates Fast Close
    by Gary Fullmer, SAP

    Learn about SAP Closing Cockpit and its two central features, a template and a task list. See how it can help you perform a fast close.

  130. SAP E-Recruiting Part 3: Source Talent Globally While Supporting Local Regulations and Business Needs
    by Mark Ingram, Solution Manager, SAP Labs, LLC; and Mitch Burton, Principal Consultant, TRM Technology

    Recruiting practices not only determine the quality of your employees but also must comply with local and international business laws. Learn the important considerations for using SAP E-Recruiting in a global environment. Most of these tips for using SAP E-recruiting are also valid for single-country deployments.

  131. SAP GRC Global Trade Services Eases Product Classification
    by Rajen Iyer, Practice and Program Head, Kryaa (March 2009)

    Discover how you can use the classification tool available in SAP GRC Global Trade Services to maintain and assign the export/import classification, Commodity Code, and the Harmonized Tariff System.

  132. SAP NetWeaver 2004s: Data Upload Feature Enhances Sarbanes-Oxley Consolidations Compliance
    by Peter Jones, Platinum Consultant, SAP

    SAP NetWeaver 2004s includes automatic data uploading functionality that replaces the Microsoft Excel-based method. It features a new consolidated process using Real-Time InfoCubes and Real-Time DataStore objects.

  133. Sarbanes-Oxley: How It Affects You and What You Should Do About It Now
    by Michael Nadeau, Publisher, Wellesley Information Services

    The Sarbanes-Oxley Act of 2002 will affect the logistics and supply chain teams as well as your company's financial people. What will be your role in bringing your organization into compliance? What areas do you need to be concerned with? This article frames the tasks that you and your team are likely to perform as a result of the Act, and provides advice for getting started.

  134. Sarbanes-Oxley: How Will It Affect You?
    by Taylor Erickson, Senior Principal, Virtuoso, LLC

    The Sarbanes-Oxley Act of 2002 (SOA) was enacted by the United States Congress to prevent accounting scandals and reporting problems from recurring, and to rebuild public trust in business practices. This article is a quick guide that outlines provisions of the Act that are of particular interest to HR organizations tasked with helping their companies achieve compliance.

  135. Sarbanes-Oxley: Seven Steps to Ensure Your Internal Controls Cover Your Risk
    by Taylor Erickson, Senior Principal, Virtuoso, LLC

    As the deadlines approach, does your SAP financials team have a plan in place for compliance with the Sarbanes-Oxley Act (SOA) of 2002? No? That's not unusual, as many companies are struggling to learn what system and process changes the Act will require. But where do you begin this learning process? The author provides a seven-step method to assess how your FI/CO system measures up.

  136. Set Up Intuitive and Automated Reporting Functionality with Crystal Reports
    by Raj Behera, Manager, Regional Implementation Group (RIG), SAP GRC (November 2009)

    Discover a strategy for configuring and developing Crystal Reports for your organization’s SAP BusinessObjects GRC solutions, such as SAP BusinessObjects Process Control. Walk through key installation requirements and configuration steps for your SAP BusinessObjects GRC solutions related to the SAP BusinessObjects Enterprise server, and identify key configuration settings that need to be put into place. Know the other aspects of developing new Crystal Reports to meet your additional needs for SAP BusinessObjects GRC solutions.

  137. Set Up Preference Processing to Delineate Customs Tariff Priorities and Manage Risk with Global Sourcing
    by Rajen Iyer, Practice and Program Head, Kryaa

    This walk-through of the configuration steps for Preference Processing within SAP GRC Global Trade Services Risk Management shows how to address tariff preferences in your trade application and systems. It includes setting up the communication between SAP GRC Global Trade Services and SAP ERP Central Component.

  138. Set Up Purchase Account Management to Fulfill EU Legal Requirements
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting

    Within several European Union countries it is legally required to report within the G/L the acquisition costs of materials that are put on stock. The SAP system uses functionality called Purchase Account Management to meet this requirement. Discover what this functionality is, how to set it up, and what the result looks like.

  139. Set Up Tax Codes to Properly Report Deferred VAT
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting

    Deferred Value Added Tax (VAT) is a special VAT that you only need when reporting to the tax authorities after the related invoice has been paid. See how to do this in the SAP system by linking a special target VAT code to a deferred VAT code.

  140. Sidestep Disasters with a Business Continuity Plan
    by Judith M. Myerson, President/Owner (October 2009)

    You need to have a plan in place if a risk assessment shows that the likelihood of an emergency event (e.g., severe storms or earthquakes) occurring is high. A business continuity plan allows an organization to minimize the consequences of a disaster and continue normal business functions afterward.

  141. Simplify Maintenance and Security with User Groups
    by Anurag Barua, Senior Manager (November 2008)

    User groups are a convenient technique to group users and treat them as one entity in terms of their privileges and behavior. See a method for setting them up in your system with some considerations from a security and user administration perspective.

  142. Simplify Segment Reporting with the New General Ledger
    by Aylin Korkmaz, Manager, Accenture UK

    Find out how the new General Ledger (G/L) in mySAP ERP differs from the classic G/L. With its new segment functionality, you do not need to create a Special Purpose Ledger to meet different compliance standards.

  143. Simplify Your Bonded Warehouse Reporting with SAP BusinessObjects Global Trade Services
    by Rajen Iyer, Practice and Program Head, Kryaa (May 2009)

    Understand how to configure and set up bonded warehouse with SAP BusinessObjects Global Trade Services and SAP ERP Central Component. In doing so, you can meet the requirement of recording transactions and movement of goods within the free trade zone or bonded area with your logistics system.

  144. Simplify Your Intrastat Declarations Processing and Reporting in Different File Formats
    by Ravi Kalluri, SAP BusinessObjects Global Trade Services Consultant, Accenture Services Pvt Ltd (May 2010)

    Learn the electronic compliance reporting functionality that comes in SAP BusinessObjects Global Trade Services, both from a feeder system communication and configuration perspective.

  145. Speed Up Security Testing Using eCATT
    by Jayesh Narwaney, Senior SAP Support Specialist

    The Extended Computer Aided Test Tool (eCATT), successor of SAP’s CATT, can test a wide range of SAP applications running in the SAPGUI for Windows or Java environments. It can also access data in the database (including customizing data) and ABAP coding on the application server. See how to use eCATT to speed up testing over multiple users.

  146. Start Your Segregation of Duties Risk Mitigation Smart — at the Single Role Level
    by Jayne Gibbon, Director of SAP GRC Support, SAP (September 2009)

    Discover key tools and process steps that assist in the remediation of risks identified at the single role level by SAP BusinessObjects Access Control Risk Analysis and Remediation.

  147. Stay Compliant with Export Controls Automatically Using SAP GTS
    by D. Rajen Iyer, SAP America, Inc.

    Export control processes can bog exporters down with endless amounts of documentation. Automating these processes improves efficiencies, saving companies both time and money. SAP’s Global Trade Services (GTS) helps automate export controls.

  148. Streamline Period-End Closing with Authorization Groups
    by John Jordan, President, ERP-Corp

    When you need to permit a select group of users to post to a previous period, you can use authorization groups to automate access. This prevents unauthorized users from posting to the previous period without requiring you to adjust the posting settings manually after a period closes.

  149. Streamline Your Parallel Accounting with the New G/L Ledger Solution
    by Aylin Korkmaz, Manager, Accenture UK

    See how to set up parallel accounting with the ledger solution in the new G/L with three procedures: ledger definition, currency valuation, and asset accounting.

  150. Tackle Changes to Inventory, Cash Flow, and Benefit Regulations with SAP ERP
    by Kehinde Eseyin, Systems Support Manager, TOTAL Nigeria PLC, Nigeria (January 2010)

    Review some accounting standard changes, including changes to foreign exchange rates, inventory, and benefits, and see how the SAP ERP system can address them.

  151. Tackle Option Pricing with SAP NetWeaver BI
    by Daniel C. Wood, Lecturer, Arizona State University, and Lipika Sur, Business System Analyst

    Perform derivative analysis using the Black-Scholes model in the SAP NetWeaver Business Intelligence system to address security concerns.

  152. Take Advantage of Automated Controls for Continuous Monitoring and Compliance Testing
    by Frank Rambo, Director, Regional Implementation Group (RIG) EMEA, SAP GRC (May 2010)

    Learn how the different options for control automation included in the automated control framework in SAP BusinessObjects Process Control 3.0 turn tedious and error-prone manual tests into a repeatable automated process.

  153. The Missing Link: Compliance at the Code Level
    by Markus Schumacher, Software Security Expert, Sebastian Schinzel, Security Consultant, and Andreas Wiegenstein, CTO, Virtual Forge

    Establishing security processes, developer training, and tools right from day one of development projects leads to initially higher investments. However, the savings resulting from lower cost for corrections and lower risk for cyber attacks in the final product are going to outweigh the initial investments substantially. See some examples of insecure code issues and some ways you can solve GRC problems at the code level.

  154. The New SAP Management of Internal Controls Application Aims to Ease SOA Compliance
    by Dr. Karol Bliznak, SAP AG

    The Sarbanes-Oxley Act (SOA) deadline is imminent and similar legislation is expected soon in Europe and other regions. To help you comply with SOA requirements, SAP has created an application called SAP Management of Internal Controls (MIC). The author discusses what you need to install MIC and how it can meet your specific requirements. He provides an example that shows the ways in which MIC streamlines an internal controls project.

  155. Top 10 GRC Expert Articles for 2009
    by Scott Priest, Managing Editor (January 2010)

    Here are the ten most popular articles that you accessed in 2009. Hot topics included the functionality of SAP BusinessObjects Access Control, segregation of duties, and audit preparation. To no surprise, our excellent SAP authors Frank Rambo and Jayne Gibbon are repeatedly listed here. Click the links below to view the articles. (Note: You need to be a subscriber to GRC Expert to view the full articles.)

  156. Two SAP-Enabled R2P Process Controls for Sarbanes-Oxley Compliance
    by Bryan Wilson, Principal, Acumen Control ERP, Inc

    Requisition-to-pay (R2P) is a key operational process that auditors for Sarbanes-Oxley Act compliance will expect to see controls. Fortunately, R/3 Materials Management (MM) has a number of configuration controls that you can use for this purpose. The author explains two, recording purchase requisitions and releasing purchase requisitions, and shows how you might use them in your compliance efforts.

  157. Upgrades Part 5: Ensure that Your Enhanced Infotypes Comply with Unicode
    by Mohamed Khalid Yousif, Certified Senior SAP HR Consultant, Vijay Madala, Senior SAP ABAP Consultant, and Piotr Zalewski, Certified Senior SAP Technical Consultant

    When upgrading from R/3 4.6C to a more recent release, many companies encounter a severe error with user exit PBAS0001. You can fix it by following these steps.

  158. Use Authorization Trace to Track Checked Authorization Objects
    by Lawrence Chung, FI/CO Consultant

    The authorization trace feature in transaction ST01 can help you trace all authorization objects being checked at different levels. See an example showing how to use it and how it affects compliance issues in your system.

  159. Use Change Documents for Sarbanes-Oxley Compliance Testing
    by Qian (Sharon) Tang, System Program Manager

    The time for Sarbanes-Oxley Act of 2002 testing is now. Find out how to leverage existing hidden system resources to help fulfill some of the crucial Sarbanes-Oxley Act mandates.

  160. Use Recycling Administration for Better Environmental Fee Reporting
    by Dietmar Giljohann, R/3 Business Systems Analyst

    Environmental regulations differ throughout countries, leading environmental fee reporting to be very difficult. See how an SAP add-on — SAP Recycling Administration — works to keep your data consistent and in line with the different regulations.

  161. Use SAP solutions for GRC as the Cornerstone for a Product Compliance Framework
    by William Newman, Managing Principal, Newport Consulting Group

    See how to leverage the governance structures inside SAP solutions for GRC for product compliance.

  162. VAT Changes Coming in 2010: Are You Ready?
    by Kees van Westerop, Senior SAP Consultant, Kwest Consulting (April 2009)

    Because of the continuous extension of the European Union (EU) and the lack of alignment of local Value Added Tax (VAT) rules, VAT-related fraud is increasing and has resulted in unequal competition among suppliers in different countries. To reduce fraud and give suppliers equal treatment regardless of their country, VAT rules for services between EU countries will change starting in 2010. Learn about the consequences for your SAP system.

  163. What the Wizards Don't Tell You About Intrastat Reporting
    by Kees van Westerop, SAP Consultant

    Enterprises based within a member state of the European Union (EU) are legally required to report their goods movements to and from other member states. These reports are called Intra European Community Trade Statistics (Intrastat) reports. In most cases, this requirement also applies to European subsidiaries of American companies. The author explains how to set up Intrastat in R/3, how it is integrated within the R/3 modules, and how to create the reports. He also gives customizing tips not covered by the SAP-provided wizards that guide you through the process.

  164. When Is Role-Based Risk Control the Best Security Strategy?
    by Thomas Tsan, Owner, TK Consultants, Inc. (January 2009)

    Simplify user provisioning by using a role-based risk control strategy and a four-tier architecture model that weighs the importance of different kinds of roles.

  165. When to Use Organization Rules and Reporting in Compliance Calibrator
    by Jayne Gibbon, SAP

    Find out if your company should use organization rules for eliminating false positives from reports.

RECENTLY ADDED

Increase the Success Rate of Your Strategies and Initiatives through an Enterprise Risk Management System

Keep Your Order-to-Cash Documents’ Integrity Intact within a Global Trade Compliance Program

Remediate Issues within Financial or Operational Compliance Initiatives in a Single System of Record

Prepare Your SAP System for Electronic VAT Declaration

Improve Traceability with SAP Solution Manager

Subscribe to the RSS feed

Subscribe to the RSS feed.

Copyright © 2010 Wellesley Information Services. All rights reserved. Email: customer.service@grcexpertonline.com.
GRC Expert, 20 Carematrix Drive, Dedham, MA 02026, USA.
Sales and Customer Service: 1-781-751-8799
SAP and the SAP logo are trademarks or registered trademarks of SAP AG in Germany and several other countries.