As SAP landscape is going more cloud, SAP Process Control 12 connects with cloud as well. In addition to the on premise landscape, SAP Process Control 12 supports now connectivity to both S/4 HANA Cloud and to SAP Cloud Platform. These new connector types can be utilized for continuous control monitoring (CCM). Automated controls are reaching the Cloud now!
PC 10.1 already enabled connectors to HANA data sources. GRC PC 10.1 can monitor business process, master data and configuration from HANA views as Continuous Control Monitoring Datasource. Key benefits are improved speed and capacity for controls analyzing massive data loads. HANA Datasource allows even more sophisticated business rules or “machine internal audit” from complex Datasource.
Name change – SAP Process Control 12 instead of GRC
As you may have noticed, in SAP’s GRC 12, SAP has dropped “GRC” away from official product name, just call it simply SAP Process Control 12. Same applies with SAP Access Control 12 and SAP Risk Management 12. This sounds fair while technically just modular products are still separately licensed even if you “buy SAP GRC”.
UI improvements with SAP GRC 12 Fiori Launchpad
SAP Process Control 12 is moving more into Fiori as SAP increases its focus on mobile. SAP GRC 12’s Fiori Launchpad is a transfer towards mobile devices. Also used via laptops, the overall look and feel is more Fiori like. All of this plays an important role when motivating and committing especially the younger generation users. When UIs gain new fans, control performance rates increase as well: people like to use it, will also do it! Fioris have been used already in SAP GRC 10.1 typically for control owners, access requestors and access approvers. Now there are new Fiori apps available in PC 12 for SAP Process Control and Risk Management.
An addition to this “fiorization”, users can now delegate their compliance tasks more flexibly. Delegation functionality is now harmonized between SAP Process Control, Risk Management and Access Control. This is speeding up tasks and ensuring compliance continuity during vacation or other absence.
Financial closing controls with Fiori
Fiori has been embedded also in Manual control performance (MCP). This generated very positive feedback especially among finance controllers when MCP was introduced as their new Internal Controls tool. On MCP multiple control evidence files or evidence links can be attached to a control performance step in few seconds. Small steps faster multiplied by hundreds of units performing financial closing 12 times a year, gains a lot in total time savings. Like other SAP PC 12 compliance scenarios, MCP includes full workflow support for reminders, escalations, and issue management. PC 12 keeps audit trail with related evidence files automatically.
Other UI options
Fiori suits for most of the users, however there are still number user interface options available for different target groups. These include traditional SAPGUI, NWBC and Adobe Interactive Forms for offline surveys and for Policy management. Policy surveys or acknowledgements are typically distributed via AD distribution lists resulting nicely formatted emails with clicks to SAP Process Control. Funny thing is that happy Policy management users don’t even know they’ve used SAP Process Control.
Other improvements for Continuous Control Monitoring (CCM) in SAP Process Control 12
- SAP Process Control 12 provides connectivity with Success Factors – SAP’s HR solution. Like many other cloud based solution, internal control coverage may have been temporarily narrowed. This was mostly due to lack of full technical GRC integration. Typically more laborious controls have been deployed meanwhile for SoD analysis or for HR process controls. With SAP PC 12, process control automation can be accelerated over Success Factors and HR processes.
- Continuous controls monitoring with the new Monitor Value Analysis, the ABAP Report subscenario becomes more automated. This scenario will now work somewhat similar to the Value Check Analysis of the configurable subscenario. This means that the calibration of the deficiency criteria will become more transparent. This can harness number of SAP standard or custom ABAP reports into more automated purpose.
- Continuous Control Monitor with Standalone Job allows process control users to validate realistic amounts of test data already during early stages of business rule development. Control master data is not needed to schedule jobs in background. This brings trust on more agile CCM development.
- The Queries Center app allows you to execute ad hoc queries for business rules, data sources, and tables, without impacting on existing business rule or data source definitions. This can leverage your existing Process Control assets when developing new automated controls. New controls are easier to justify and simulate based on existing control data.
Internal controls need to remain efficient and operationally effective both with cloud and On-premise solution landscape. This is one of the challenges GRC teams and internal controls are now facing. Fast moving business and digitalization mean that audit proof controls of today may be obsolete tomorrow. SAP Process Control 12 is one of the answers meeting these challenges. SAP PC 12 brings number of new CCM features, cloud connectivity and several UI improvements for day-to-day users.
Please contact GRC Nordic for more information. We have a proven track record of +50 successful SAP GRC implementations for both Access controls and Process Controls with best practice automated control templates.