PolicyManager vs. SAP Process Control

The part I like the most is our staff not having to log in to view policies. We have so many passwords to remember having this convenience is a big satisfier.

In my opinion, SAP Process Control is well suited for bigger companies with an already mature Internal Control System as well as for bigger companies who want to completely new/redesign the internal control system. The size of the company, as well as the budget, is quite important when thinking about the implementation of SAP Process Control. A smaller company with e.g., 150 people should think more about implementing SAP FCM.

Incentivized

• If I ever have any technical issues or questions the support team is great at getting back to me very quickly. I also like all the resources available to help as well.
• Policy reports, there are so many to choose from. These reports help me track several different things in the system. Compliance, attestations, past due, and so much more.
• Another plus for me is being able to add linkages to outside programs like TJC and Elsevier. Linking these to policies saves a lot of time.

• Native connection to SAP applications
• Automated monitoring process of SAP applications
• Workflow capabilities for control testing

Incentivized

• The program doesn't work well with Chrome, would like to see that fixed. We have several staff members that use Chrome.

• Default delivery of controls could be done by SAP on some basic controls like client openings, password controls, etc
• The messaging or customization of messages in different workflows is limited, which could be introduced to enhance the product
• SAP Process control does not have the capability for cloud product monitoring which is required with more SAP cloud products available right now

Overall this program is great. I am continuously in the program and find it very simple to use. I do have some staff that struggle, only because they are not in the program as often as I am

The connectivity with other SAP products out of the SAP GRC suite, like Access Control and so on, was key for the decision. Also we had an already mature SAP System landscape as well as having internal processes that were similar to the SAP Process Control standard processes helped us with the decision to implement SAP Process Control.

Incentivized

• The program has kept us compliant on reviewing and updating all of our policies.

• Automated alerts for controls issues
• Workflow capabilities; however, there's natively only 2 levels of review. More layers would be beneficial.

Incentivized