Insights on governance, risk and compliance SAP GRC GRC: Governance, Risk, and Compliance
...1 GRC...2 GRC...6 SAP GRC...8 SAP GRC Risk Management... 9 SAP GRC Process Control... 10 SAP GRC Access Control... 11... 12 iii Insights on governance, risk and compliance
Governance, Risk, Compliance GRC GRC GRC GRC SAP GRC Risk ManagementProcess Control Access Control GRC Insights on governance, risk and compliance 1
GRC GRC? GRC Enterprise Risk Management ERMGRC 2 Insights on governance, risk and compliance
4 GRC GRC IT Global Fortune 100 SAP 90 Insights on governance, risk and compliance 3
GRC GRC? GRC GRC GRC GRC 4 Insights on governance, risk and compliance
GRC GRC GRC GRC GRC GRC GRC The Risk Agenda: Client Agenda IT Insights on governance, risk and compliance 5
GRC GRC GRC SOX GRC IT GRC GRC GRC GRC GRC Global Fortune 500 2,000 300 SAP GRC Access Control 6 Insights on governance, risk and compliance
GRC GRC GRC Global Fortune 500 SAP 20SAP GRC Access Control 20 30% Insights on governance, risk and compliance 7
SAP GRC IT GRC SAP GRC SAP GRC Risk ManagementKRI Key Risk Indicator SAP GRC Process Control Control Self Assessment: CSA SAP GRC Access Control ID SAP GRC Global Trade Services / 3 SAP GRC Risk Management SAP GRC Process Control SAP GRC Access Control SAP GRC Risk Management KRI SAP GRC GRC Risk Management KRI GRC Access Control ID GRC Process Control CSA GRC Global Trade Services / SAP GRC Process Control SAP GRC Access Control SAP GRC Global Trade Services 8 Insights on governance, risk and compliance
SAP GRC Risk Management SAP GRC Risk Management SAP GRC Risk Management GRC SAP GRC Risk Management SAP GRC RM 4 SAP GRC RM Insights on governance, risk and compliance 9
SAP GRC SAP GRC Process Control SAP GRC Process Control / IT Continuous Control Monitoring: CCM : SAP GRC Process Control ISO CCM120 SAP / ERP IT 10 Insights on governance, risk and compliance
SAP GRC Access Control SAP GRC Access Control Segregation of Duties: SoD get clean stay clean SAP GRC Access Control 4 1. Access Risk Analyzer: ARA 2. Business Role Management: BRM 3. Emergency Access Management: EAM 4. ID Access Request Management: ARM SAP GRC Access Control ID SAP GRC Access Control SAP GRC AC4 SAP GRC AC BRM ID ARM EAM ARA SAP GRC Access Control Insights on governance, risk and compliance 11
GRCGRC GRC GRC GRC Risk Management GRC Process Control SAP GRC Access Control ID GRC GRC GRC SAP insider2012 12 http://www.ey.com/publication/vwluassets/10-2012_grc/$file/10-2012_grc_ernst&young.pdf 12 Insights on governance, risk and compliance
Insights on risk June 2012 Ernst & Young による内部監査サーベイの結果より? Insights on governance, risk and complianceit GRC Insights on governance, risk and compliance www.ey.com/gl/en/services/ Advisory/IT/IT-risk-library-page Risk Management The future of internal audit is now Increasing relevance by turning risk into results 将来の内部監査に向けた取り組み 2012 年 6 月 Turning risk into results: enabling risk management with SAP GRC SAP GRC The future of Internal audit is now: increasing relevance by turning risk into results Process control Insights on governance, risk and compliance Turning risk into results: enabling compliance and process management with SAP GRC SAP GRC SAP Smart Control: transforming controls to reduce cost, enable growth and keep the business safe : Access control Turning risk into results: enabling access management with SAP GRC SAP GRC A risk-based approach to segregation of duties IT Insights on governance, risk and compliance 13
Ernst & Young 16 7 www.ey.com www. shinnihon.or.jp 2013 Ernst & Young ShinNihon LLC. All Rights Reserved. Japan 03 3503 3500 azuma-yshhr@shinnihon.or.jp 03 3503 1704 yokokawa-hrysh@shinnihon.or.jp Global Paul van Kessel +31 88 40 71271 paul.van.kessel@nl.ey.com Randall J Miller +1 312 879 3536 randall.miller@ey.com Americas Michael L. Herrinton +1 703 747 0935 michael.herrinton@ey.com Bernard R. Wedge +1 404 817 5120 bernard.wedge@ey.com Europe, Middle East, India and Africa (EMEIA) Jonathan Blackmore +44 20 795 11616 jblackmore@uk.ey.com Manuel Giralt Herrero +34 91 572 7479 manuel.giraltherrero@es.ey.com Asia-Pacific Jenny S. Chan +86 21 2228 2602 jenny.s.chan@cn.ey.com Rob Perry +61 3 9288 8639 rob.perry@au.ey.com SCORE no. AU1488 ED None 100-6028 2 5 28F Tel: 03 3503 2846 E-mail: AS-Markets@shinnihon.or.jp