It has certainly met the requirement to centralise GRC activities. Replacing our siloed and fragmented systems with it was a significant achievement for us, as it eliminated duplicated efforts and inconsistent reporting. Thanks to the automated assurance processes, particularly those used to identify and analyse process and control deviations, our operational management was able to modify our Internal Control System (ICS) much more quickly to meet current regulatory requirements. It really freed compliance people from routine processing. Review collected by and hosted on G2.com.

Initially, however, it was complicated to implement. It took us about seven months to set up and integrate it all within our current SAP landscapes, and the GRC Control service was particularly problematic with the data flows. However, once mapped, it works well. Review collected by and hosted on G2.com.