Too many SoD conflicts, unclear ownership and audit findings on user access are common in SAP environments. I help you get access risk under control and keep it there – across all your legal entities.

 

What I can do for you

• SoD risk analysis with SAP GRC Access Control, across legal entities

• Rule set review and design of mitigating controls

• Remediation plans: role redesign, user clean-up and clear ownership

• Management reporting and dashboards on SoD conflicts and trends

• Audit preparation and follow-up of IT audit findings on user access

• Link access risk to your internal control framework (AO/IC, SOX)

 

For whom

CFOs, internal auditors, IT/SAP managers and compliance officers in organisations running SAP ECC or S/4HANA.

 

Why ERH Consult

Etienne Herlaar, MBA, combines 35+ years in Finance, Risk, Compliance and IT with hands-on SAP GRC experience. I speak the language of both the auditor and the SAP team, and I am not a technical consultant: I make sure access risk is understood, owned and reported. For deep technical work I bring in specialists from my network.

 

Working in Belgium and the Netherlands, in Dutch and English. Contact me for a short, free intake call.