TrustRadius: an HG Insights company

SAP Process Control

Score9 out of 10

85 Reviews and Ratings

Reviews

3 Reviews

SAP Process Control at a glance

Rating: 8 out of 10
Incentivized

Use Cases and Deployment Scope

We are using SAP Process Control as the backbone of our internal control system. It helped us to get rid of offline files, established a single source of truth, and helped us to implement a workflow based way of working. With the possibilities that SAP Process Control offers, we managed to mature our way of working as well as our internal control system.

Pros

  • Workflows - The workflows of SAP Process Control are extremely helpful
  • Reporting - Standard reports as well as the connection to SAP AC is very helpful
  • Continuous Control Monitoring is the way to go in ICS Topics in the future.
  • Handling of users - Assignment and Replacements
  • Spot Checks - Helpful workflows and setup

Cons

  • Connection to SAP AC
  • Easier workflows for remediation actions
  • Configuration of workflows - e.g. email templates for workflows
  • Survey design

Likelihood to Recommend

In my opinion, SAP Process Control is well suited for bigger companies with an already mature Internal Control System as well as for bigger companies who want to completely new/redesign the internal control system. The size of the company, as well as the budget, is quite important when thinking about the implementation of SAP Process Control. A smaller company with e.g., 150 people should think more about implementing SAP FCM.

SAP Process Control automates compliance initiatives

Rating: 7 out of 10
Incentivized

Use Cases and Deployment Scope

SAP Process Control helps to manage the end to end SOX compliance process and assist with monitoring of automated and configurable controls in the SAP application environment. The SOX compliance process includes a inventory of the SOX controls, performance of controls, test of effectiveness of the controls, and reporting on key gaps and issues with the control testing process.

Pros

  • Native connection to SAP applications
  • Automated monitoring process of SAP applications
  • Workflow capabilities for control testing

Cons

  • Integrated attachments functionality (i.e., edit Word/Excel documents within SAP PC, rather than having to download the files locally)
  • More flexible dashboarding capabilities
  • Better out of the box reporting
  • No out of the box content for Controls, Regulations

Likelihood to Recommend

SAP Process Control is well suited for managing the end to end lifecycle of controls across different regulations. When managing a risk and controls framework it is better suited for public companies that have regulation requirements. The tool does not offer good capabilities for managing robust IT regulations. It would be good if there's improvement to the tool so it can be used to manage IT assets.
Vetted Review
SAP Process Control
10 years of experience

SAP Process Control helps us have more reliance on automatic monitoring of standard it controls

Rating: 8 out of 10

Use Cases and Deployment Scope

The product is useful for doing a lot of automation to monitor risks and to save time on testing of controls. The product has a lot of adoption to happen to check on more controls, which can help every customer to help on monitoring the risks and monitor mitigation without manual monitoring involved.

Pros

  • Monitoring IT controls
  • Monitoring the mitigations applied against risks defined in systems
  • Automatic monitoring of many IT and business controls will help save time and money for internal auditors and also assert more confidence in controls defined in the landscape

Cons

  • Default delivery of controls could be done by SAP on some basic controls like client openings, password controls, etc
  • The messaging or customization of messages in different workflows is limited, which could be introduced to enhance the product
  • SAP Process control does not have the capability for cloud product monitoring which is required with more SAP cloud products available right now

Likelihood to Recommend

It’s appropriate to monitor any IT-related controls which have tables where the data resides. It is very tough to integrate new-age products from SAP like Ariba or Concur, which are cloud instances that need to be enhanced for the broader cloud integration.