G2

Gisel B.

Marketing and Digital Communication Specialist

Information Technology and Services

Enterprise (> 1000 emp.)

10/17/2026

"This tool links each risk to its controls, owners and assessment"

4.5/5

What do you like best about SAP Risk and Assurance Management?

It's built on SAP BTP and talks to our GRC and ERP systems via OData services. Single sign-on is done using SAML through our identity provider. Our comms workspace gets the current status in an API call before we send out any external statements, as there are status fields on the issue and risk records. There are no file exports. Review collected by and hosted on G2.com.

What do you dislike about SAP Risk and Assurance Management?

To be honest, I found the idea of risk scoring a bit confusing at first. In my first briefing, I got the wrong inherent and residual ratings, so I had to redo the heat map after the risk team gave me the new likelihood rating they'd worked out. Review collected by and hosted on G2.com.

What problems is SAP Risk and Assurance Management solving and how is that benefiting you?

Previously, I would only find out about a control issue from an email that had been forwarded two days later. Then I'd have to write a statement from scratch, with legal and audit teams squabbling over which version of the facts was up to date. There weren't any risk registers that belonged to anyone. Now I open the risk record, the owner, the status and the open remediation actions, and write from one source that's already signed off the audit. There was a big drop in audit findings from 41 to 12, with at least one disclosure being in conflict by a quarter. Review collected by and hosted on G2.com.