The toehold of each control automation must cover the biggest risks and offer the highest potential. This potential can be a high frequency of control execution, a time-consuming control execution, or the centralized approach, which allows efficient application of the same logic to all entities. Best-in-class companies reach a level of automation between 35 and 45%, depending on their level of standardization and automation of their business processes.
Service: Expert review of your ICS framework to detect controls which can be facilitated or replaced by Continuous Control Monitoring (CCM) Scenarios; Design, development and delivery of CCM scenarios, embedded into your Internal Control Management process.
•There are three main types of controls available: First is monitoring changes (change lock checks); second is monitoring values (value check); and the third is monitoring events in the system (event check).
•Depending on the underlying data, different scenarios can be implemented. For example, controls around master data, configuration data, transactional data or authorization-related data.
•According to the control objectives, preventive or detective controls can be implemented.
•SAP software can be connected directly into the GRC system or indirectly via an existing connection to a SAP BI system or HANA database.
•We are offering more than 160 best practice scenarios for the SAP ERP system. The scenarios are covering areas like SAP basis, system administration, accounting (accounts receivable, payables and fixed assets), order to cash, procurement to pay, inventory management, human capital management and payroll, as well as treasury.
Benefit: Regardless if your ICS implementation was compliance-driven or if your ICS covers operational risks, control automation is worth thinking about to increase the efficiency of your internal control system. Automated control and monitoring scenarios are an important driver of efficiency carrying a substantial amount of added-value and potential for cost savings. Increasing the efficiency of your internal control system unleashes resources without impacting the control effectiveness or the quality of your ICS.
Reduce manual efforts of assessing / testing / confirming internal controls will lead to a robust, quick and trustworthy check of all data generated and stored in SAP, covering most sensitive areas such as GL, O2C, P2P, H2R ITGC, etc.