MetricStream Platform vs. SAP Process Control

MetricStream is well suited for when you need to pull a report into Excel for further analysis. It is not good for when information needs to be entered as this is all done manually by analysts and managers. If we can implement a way to take parts of uploaded documents and have the system automatically enter the information in the designated fields in MetricStream, it would cut out lots of manual work for our department.

Incentivized

SAP Process Control is well suited for managing the end to end lifecycle of controls across different regulations. When managing a risk and controls framework it is better suited for public companies that have regulation requirements. The tool does not offer good capabilities for managing robust IT regulations. It would be good if there's improvement to the tool so it can be used to manage IT assets.

Incentivized

• Easy to navigate.

Incentivized

• Workflows - The workflows of SAP Process Control are extremely helpful
• Reporting - Standard reports as well as the connection to SAP AC is very helpful
• Continuous Control Monitoring is the way to go in ICS Topics in the future.
• Handling of users - Assignment and Replacements
• Spot Checks - Helpful workflows and setup

Incentivized

• Speed/efficiency.
• Missing functionality: Uploading documents (Excel sheets) into MetricStream and being able to pull information from that form into the program.
• Improve number of outages and time that it is out for.

Incentivized

• Integrated attachments functionality (i.e., edit Word/Excel documents within SAP PC, rather than having to download the files locally)
• More flexible dashboarding capabilities
• Better out of the box reporting
• No out of the box content for Controls, Regulations

Incentivized

Archer is more risk-management-friendly in that it has a better interface and more room to conduct risk-related tasks and pull reports.

Incentivized

The connectivity with other SAP products out of the SAP GRC suite, like Access Control and so on, was key for the decision. Also we had an already mature SAP System landscape as well as having internal processes that were similar to the SAP Process Control standard processes helped us with the decision to implement SAP Process Control.

Incentivized

• It keeps records of all of our vendors and the corresponding documents.
• Other departments can access information on vendors.

Incentivized

• Significant control on risks
• Significant savings on audit testing can be achieved
• Automation of risk management has a lot of audit standardization and confidence in compliance
• Reliability of automated controls reduces time vested in testing the standard controls