su53 Solutions is pleased to announce its intention to support GRC2009 in Europe, to be held in Prague between 17th – 20th November. The event promises to cover much useful information on SAP’s latest thinking, particularly in the area of upgrades and the rapidly growing level of experience in Process Controls and Risk Management. For existing users and for those considering how best to tackle risk management and security issues, this is the event to attend. Please contact This e-mail address is being protected from spambots. You need JavaScript enabled to view it for updates and more details as they become available.

New  - SAP’s Process Control v3.0: – the eagerly awaited upgrade is now on its way to being generally available later this year. It entered ramp-up on 30th April, and is already demonstrating its benefits in the ramp-up projects that are putting it through its paces.

SAP® BusinessObjects Process Control v3.0 will bring additional out-of-the-box controls and significantly more flexibility for the definition of customers’ own controls.

Process Control is all about giving the ability to automate business process controls. It gives perfect repeatability, improves efficiency, and allows complex analytics to be used, thus improving documentation and reducing the dependency on key people.

“77% of companies expect their compliance budgets to increase” – AMR Research

Inevitably there are costs associated with implementing processes and procedures to manage compliance and controls, but PC v3.0 can help to reduce that cost, allow the management of processes better and give strategic advantage.

• PC 3.0 moves beyond “just” financial compliance and gives oversight across business processes. It is especially attractive for organisations that have to demonstrate operations in multiple control environments.
• PC 3.0 helps to reduce the costs associated with the design, operation, testing and remediation of key, high-risk business processes.
• PC 3.0 supports multiple compliance initiatives including operational and financial compliance
• PC 3.0 follows a risk-based approach to operational compliance
• Operational compliance is delivered through packaged content, control automation, CAPA and analytics.

su53 Solutions are experts in SAP® GRC, Security and Risk Management.  We focus exclusively on GRC and Security in businesses using SAP and are dedicated to finding innovative ways to expedite the implementation of GRC tools to minimise the cost and maximise the return on our clients’ investment in the shortest possible time.

If you would like to find out more about how we can help your organisation to take a cost-effective approach to risk management via effective process control, contact us via This e-mail address is being protected from spambots. You need JavaScript enabled to view it .

Earlier this year su53 Solutions commissioned a confidential and independent survey to gain feedback from our client base on their experience with us. The results are to be used as part of our ongoing commitment to continuous improvement and achieving excellence in customer satisfaction.
The results are very positive and affirm good progress in aspiring to give excellent service and value for money.

SURVEY RESULTS HEADLINES

What our clients said:
The survey questions were structured into sections as below:
Initial meetings: - clients were asked about our approach to them prior to formal engagement

• “They come across as approachable, professional, patient, and confident in abilities”
• “Liked fact that initial meeting was represented by technical and commercial people, they understood the risks we were facing and their proposed solution was well de-risked”
•  “I contacted them because I knew of them and was looking for a competitive quote against XXX as well as being better than XXX “
• “su53 definitely knew what they were talking about and had more experience and flexibility than XXX which gave me more confidence”
• “Proposal was good, understood the complexity of our situation, said all the right things and made us feel comfortable”
• “They were clear on the benefits and set payment milestones, nothing less than 100% pre engagement”

Delivery- we wanted to know how clients felt after the project(s) had been completed

• “Very highly rated.”
• “Their subject knowledge is very good and their installation of relevant tool was very good.”
• “They have identified business risks which demonstrate their Risk and Security thinking.”
• “Their subject knowledge and delivery is unquestioned. They have advised on security and other issues helping us to improve security and improve processes.”
• “They always challenge, question whether what is being done is the most efficient way to do it.”

Value for Money- specialists might be viewed as expensive, but su53 is targeting value for money:

• “Overall value for money is good.”
• “They always deliver what is promised and often go beyond that.”
• “Delivery is good, quite flexible and they deliver to expectation.”
• “They have delivered to time and budget and we are getting value for money. “
• “XXX typically charge a lot per day, su53 typically 50% of that. A contractor might charge 20% less per day but su53 offer more flexibility and bring in other company experience.”
• “Overall value for money yes, but hard to judge, they are slightly more expensive than contractors, cheaper than Big 4, but definitely more effective.”

Competition – we wanted to know how su53 is rated against its competitors, and who the market regards as our competition

• “(su53 ) are more agile and understand the issues/subject better.”
• “Can’t really think of a like for like competitor, we were looking at auditors/accountants (PWC) who were much higher cost.”
• “XXX/YYY but su53  outperform both in their chosen field”
• “SAP (but limited availability and expensive ) and auditors (but su53 are a lot more knowledgeable). I never feel like they are selling, they have a good balance, it feels like they are offering advice” (said in contrast to an audit approach).

What our Business Partners had to say:

•  “Initial impression was very professional, good levels of detail in the website and brochures. Their material is ‘absolutely great’ “
• “They are the company in the UK that I would have the most confidence in for their particular area of expertise. “
• “I haven’t a bad word to say about them.”
• “No qualms about contacting them in their specialist area and they are without question able to support their specialist niche.”
• “I am confident in their abilities, they are very professional, very knowledgeable and it shows.”
• “Technical subject knowledge is very high.”
• “They are the technical experts in the UK in this area and I wouldn’t advise a client to go anywhere else regarding SAP application security”
• “Client was definitely happy. It was a very difficult client who would seek out any weakness but there was no chink in Gary’s armour. su53 were confident without being cocky.”
• “Their professional standards are high and they have delivered to scope and timescale (maybe over delivered), certainly above expectation.”

This customer survey was conducted independently by Jeff Grimes of Belwether Limited. (www.belwether.com)

su53 Solutions, experts in security & GRC for SAP®, has today launched its updated website in line with the commencement of GRC2009 next week. The new web site incorporates feedback from clients and staff, and is structured to bring order to the complex scope of risk management for SAP clients.

su53 has a strong reputation for pragmatic and innovative services, and allows visitors to the site to download white papers, product briefings, and service specification PDFs. The powerful imagery gives a clear structure to the various areas, and helps visitors navigate to what they need. In addition, much more has been added to help the business users determine if and how su53 could help in their particular issue.

MD Martyn Proctor explains: "su53 Solutions is continuing to expand, now offering services and expertise in Process and Risk Management, as well as the busy area of Access Controls and the entire spectrum of SAP® security. We want the imagery and the website to reflect this broader coverage and to reflect the clear thinking we have in how we deliver our services."

The new website will appeal to organisations which have particular challenges with their system and process security. Typical scenarios that face customers are represented, alongside a directory of the broad portfolio of services that are available to help in those situations.