SAP Risk and Assurance Management Reviews & Product Details

It is not a replacement for inefficient systems or manual processes. It eliminates redundant work and reporting issues, reducing the need for compliance specialists to process repetitive issues and enabling them to focus on more important matters. Process deviations and errors are minimized by identifying, analyzing and adjusting the operational management process. Glossary terms are clearly outlined and integrated, and are clearly understood and transparent. It provides global SAP integration and an important centralized compliance management function. Review collected by and hosted on G2.com.

SAP applications via Fiori provide users with a contemporary interface based on their role. Predictive Analytics & AI Integration forecasts risks. The platform will be on SAP BTP NG. This integration enables public APIs to transfer issues, as well as OData V4 for controls and real time data feeds from S/4HANA and SAP Signavio. Review collected by and hosted on G2.com.

We developed this platform on SAP BTP, which means it can be multi-cloud ready and reach the widest possible audience across major hyperscalers. It can also be adapted as needed. This helps. It's definitely worth putting in the investment because of the ways you can integrate it and automate it. Data is ingested and analyzed in real time. SAP Fiori delivers a clear UI. Review collected by and hosted on G2.com.

SAP Risk and Assurance Management centralizes our Governance, risk, and compliance activities, significantly improving operational management and regulatory compliance for us. Review collected by and hosted on G2.com.

SAP Risk and Assurance Management consolidates GRC activities. SAP Risk and Assurance Management uses the SAP Business Technology Platform to process data from different systems as it happens. It's a machine learning model that can predict risk and spot anomalies. Public APIs are used to move issues to external case management systems. It'll also import controls from an OData V4 service. Just to let you know, the information gets replicated to SAP Datasphere. Then, we use transformation and categorization to identify the infraction. Review collected by and hosted on G2.com.

When we integrate this solution, it takes a lot of configuration in our SAP environment to start with. We planned for its implementation carefully. It's all synced up with the other core systems, like SAP S/4HANA. So, the platform works efficiently and provides all the value it was designed to deliver, once it's been set up properly. Review collected by and hosted on G2.com.

Risk registers were kept in spreadsheets and updates on what needed to be done to deal with the risks were received every three months, if at all. The new platform now has one register of owners and due dates. The result was a 50% drop in the time needed for audit preparation in two reviews. The heat map loads quickly and you can use it with any of the controls without having to move to a different page. Review collected by and hosted on G2.com.

The projects took about seven weeks to complete, and partner-led workshops were held to support the process. Any questions about the configuration were answered within three days. Review collected by and hosted on G2.com.

SAP Risk and Assurance Management compares how much you're spending on campaigns to thresholds as transactions are posted, so you can spot overspends as they happen. I'm now getting a weekly exception list in my queue after the system keeps checking each post against the threshold. I didn't see any binges this last quarter. This is a fixed and sent campaign from SAP RAM (Campaign Controls). Review collected by and hosted on G2.com.

The work package planner got everyone talking. It took a lot of effort to get the automated runs set up around the campaign launch date and cycle of invoices. Review collected by and hosted on G2.com.

It has certainly met the requirement to centralise GRC activities. Replacing our siloed and fragmented systems with it was a significant achievement for us, as it eliminated duplicated efforts and inconsistent reporting. Thanks to the automated assurance processes, particularly those used to identify and analyse process and control deviations, our operational management was able to modify our Internal Control System (ICS) much more quickly to meet current regulatory requirements. It really freed compliance people from routine processing. Review collected by and hosted on G2.com.

Initially, however, it was complicated to implement. It took us about seven months to set up and integrate it all within our current SAP landscapes, and the GRC Control service was particularly problematic with the data flows. However, once mapped, it works well. Review collected by and hosted on G2.com.

When you connect to S/4HANA for the control evidence and to our identity provider for role-based access, only analysts will see the controls that are part of their role. An API can get audit results straight from our ticketing system and add them to the register. One or more evidence attachments will be linked to a control record. Review collected by and hosted on G2.com.

Turnover is never good. There's no bulk reassignment of controls in control testing workflows, and it takes me an afternoon to assign controls individually when my control owners leave. Configuration questions were answered within a few days later. Review collected by and hosted on G2.com.

It's built on SAP BTP and talks to our GRC and ERP systems via OData services. Single sign-on is done using SAML through our identity provider. Our comms workspace gets the current status in an API call before we send out any external statements, as there are status fields on the issue and risk records. There are no file exports. Review collected by and hosted on G2.com.

To be honest, I found the idea of risk scoring a bit confusing at first. In my first briefing, I got the wrong inherent and residual ratings, so I had to redo the heat map after the risk team gave me the new likelihood rating they'd worked out. Review collected by and hosted on G2.com.

What I like best about SAP Risk and Assurance Management is its ability to centralize risk management, internal controls, and compliance within a unified platform. It provides greater visibility into enterprise-wide risks, enables proactive risk mitigation, and helps organizations make better-informed decisions. I particularly value its integration with SAP’s broader ecosystem, which supports continuous monitoring, improves operational efficiency, and strengthens governance and accountability across the organization. Review collected by and hosted on G2.com.

What I find challenging about SAP Risk and Assurance Management is that it can take time to configure and adapt the platform to an organization's specific needs. For teams that are not already familiar with the SAP ecosystem, the learning curve can be steep, and implementation may require specialized expertise. I would also like to see a more intuitive user experience and simpler reporting capabilities, making it easier for business users to identify risks, monitor controls, and take action without relying heavily on technical teams. Review collected by and hosted on G2.com.

SAP Risk and Assurance Management is really handy, and the user experience is helpful for both beginners and experienced users across the business. In organisation it went well. Review collected by and hosted on G2.com.

As of now, there isn’t much negative for me to say or dislike about the system. However, some users have experienced slowness issues, and it seems to depend on your role. Review collected by and hosted on G2.com.