SAP Process Control vs. Secureframe

SAP Process Control is well suited for managing the end to end lifecycle of controls across different regulations. When managing a risk and controls framework it is better suited for public companies that have regulation requirements. The tool does not offer good capabilities for managing robust IT regulations. It would be good if there's improvement to the tool so it can be used to manage IT assets.

Incentivized

Good typical compliance framework with easy interface and integrations to ensure standard compliances like SOC 2. I suspect for the base functionality, its very similar to other competitors like Vanta so really a preference.

Incentivized

• Workflows - The workflows of SAP Process Control are extremely helpful
• Reporting - Standard reports as well as the connection to SAP AC is very helpful
• Continuous Control Monitoring is the way to go in ICS Topics in the future.
• Handling of users - Assignment and Replacements
• Spot Checks - Helpful workflows and setup

Incentivized

• Integrated attachments functionality (i.e., edit Word/Excel documents within SAP PC, rather than having to download the files locally)
• More flexible dashboarding capabilities
• Better out of the box reporting
• No out of the box content for Controls, Regulations

Incentivized

The Questionnaires feature (which assists in RFP's, security questionnaires, etc) could be designed a lot better. I see what they were going for, and based on their track record for improving features I'm sure it will get a refresh, but in it's current state it is the only features that I do not use.

Incentivized

The connectivity with other SAP products out of the SAP GRC suite, like Access Control and so on, was key for the decision. Also we had an already mature SAP System landscape as well as having internal processes that were similar to the SAP Process Control standard processes helped us with the decision to implement SAP Process Control.

Incentivized

Simplicity, ease of use, and responsiveness. The three most important things for me in any product/service. If use of the product comes naturally and I get the answers I need quickly you're already a contender for me. But, when I can get a response from my account manager in under 90 minutes, consistently. Then I know that my business matters to them.

Incentivized

• Significant control on risks
• Significant savings on audit testing can be achieved
• Automation of risk management has a lot of audit standardization and confidence in compliance
• Reliability of automated controls reduces time vested in testing the standard controls