What would be the best way to explain the GRC principle of automation? During the course of numerous implementation projects, Riscomp’s 3D approach has established itself. For GRC specifics and our clients, the Riscomp 3D approach is crucial for the structuring and implementation of projects.
Our top priority is to understand the requirements and goals of our clients. In order to automate GRC processes and to gain the utmost added value by doing so, it is vital to cleverly combine three views: process, content and technology. This is exactly what we can offer from one single source:
- GRC process: to know “how” is important! Our goal is to understand requirements and to master best practices and the range of standard features. We streamline business processes by integrating the results of roles, workflows, user-interface, risk management, and reporting.
- GRC content: to know “what” is vital in GRC. We are not claiming to be qualified to understand our clients’ processes, risks and controls better than they do themselves. We provide know-how and tools in order to depict your GRC framework in an ideal way. In the CCM sector we also have our own scenarios and tips available, which will offer you inspiration for covering important application and control risks in the SAP ERP area.
- Technology: to define hardware & software requirements, to plan system topography in a cost-effective way compliant with requirements while keeping in mind the official road map of software manufacturers – this is where technical questions start and lead to phases of integration, configuration and development, as well as the subjects of support and upgrades. Also, as far as hosting and business operation is concerned (see GRC Cloud), it is of the essence to always stay up-to-date and be able to answer any questions the client may have.
We are convinced that each element of this 3D model requires expertise in order to achieve added value and high user acceptance when implementing the GRC processes. It goes without saying that a solid risk and compliance background is provided and statutory requirements are adhered to. Our conviction is based on our experience and is reflected in the structure of our services (service finder) and in the development of our projects (references).