SAP
Strategy Technology Support Process Risk Management Information Access Compliance
Home News GRC2009 USA
GRC2009 News
Day 3: Wednesday, 18 March 2009 Print E-mail
Thursday, 19 March 2009 10:32

It was great to see some of the friendly faces that we’ve grown to expect at such events and to expand our network of contacts in the GRC market. Our booth location is next to Alert Enterprise (Virsa founder Jasvir Gil’s company) and it’s been good to chat with him and his team about their developments over the last year. Other companies we’ve spent time with and intend to work with include:

Alert Enterprise
www.alertenterprise.com
Integrating IT and physical security across diverse systems, applications, databases and geographically distributed assets
CSI Tools
www.csi-tools.com
Providers of inexpensive stand-alone SoD and security toolset
DGN Technologies
www.dgntechnologies.com
Largely ex Virsa/SAP developers based in US and Indian
Greenlight Technologies
www.greenlightcorp.net
Developers of GRC add-on utilities & cross application connectors
Realtime
www.realtimenorthamerica.com
Provide biometric controlled access to SAP

Our Pete Fitzsimmons – who’s ex Virsa – has been renewing his acquaintances with some old colleagues (he seems to know everyone!) and it was great to meet Susan Stapleton (Director of SAP GRC Customer Advisory Office) and put a face to the name. We’ve also had time today to get some detailed demonstrations in the SAP Labs of the new Risk Management 3.0 pre Ramp-up and this product is looking impressive. 

The main session today was SAP GRC BusinessObjects VP Narina Sippy, who delivered an inspiring keynote presentation that really showed SAP’s vision and maturity. Some key messages from this were:

GRC in the past was fragmented but is changing – primarily as a more holistic view of risk management across the business takes shape, but also as the leading organisations treat GRC differently, as a source of strategic performance enhancement.

Of course we all talk about risk but the flip side is reward – and understanding risk v reward drives performance. Narina took an example in the airline industry. Southwest Airlines managed the risk of fuel price fluctuation and in 1999 hedged oil provision at $51/barrel. That has saved them $2 billion! However Singapore Air’s risk assessment was less effective and they didn’t move until 2007, when they hedged oil at $121/barrel – pretty much the top of the marker. At current prices they are paying 300% premium and in Q4 last year alone they lost $341m.

Customer spotlight 1: Pearson - Frank Di Pentima (VP, Financial Compliance)
Pearson LogoProfile: 15,000 users, use GRC RAR, SPM, v5.2 across SAP and non-SAP (via Greenlight connectors). Pearsons recognised value in being proactive. The business case was simple as they are risk averse with a strong focus on brand and reputation, and already had a pre-built rule book.

Customer spotlight 2: Sharp Electronics - Wyatt McManus (Process Management and Business Controls)
Sharp Logo9 divisions in US, 2 in manufacturing and 7 in sales and marketing.
Their need was to standardise and stabilise their control environment. The focus was on financial controls and subject to JSOX. They began with Access Controls (RAR and SPM) but also deployed Process Controls with limited scope. They particularly like the document repository, key in their JSOX focus. They are now digitising their other business controls as well as looking at GTS.

Customer spotlight 3: McKesson - John Sapp (Senior Manager IT GRC)
McKesson Logo$102Billion revenue - “Probably the biggest company you don’t know off”. John is clearly a big thinker. In his view it’s about organisational collaboration across Internal audit, technology risk management, and Compliance. Federated GRC requires collaboration. Key is defining the stakeholders and understanding the current state. McKesson has made 23 acquisitions in 4 years, and each one brings a new set of challenges. In his view, you should forget tactical solutions - “A fool with a tool is still a fool”. John challenged everyone to think “Are you risk averse or risk aware?” The next stage on from that is being risk intelligent. GRC does drive strategic performance in his view – but it absolutely does need
executive sponsorship and visionary leadership. Interestingly 12 months ago John’s role didn’t exist but he went to GRC2008, got the message, and went back and defined the new job!

Back in the exhibition hall it was busy, but between the bursts of customers and prospects, we took the chance to meet the other 30 or so exhibitors and to ask how they were finding the market – and the responses (one we filtered out the bravado and spoofing...) to our mind largely fell into two camps. Some were focused on how bad the recession and economy is and were shedding jobs and cutting salaries (and that excludes the companies finding it so tough they weren’t here at all this year!). Others were saying that they’d rethought their business model and were more focused than before and in growth mode. However I think everyone agreed on two things – firstly, that the US market seems hardest hit and secondly, that decisions on new projects were taking much longer than before.

Last Updated on Thursday, 19 March 2009 10:58
 
Day 2: Tuesday, 17 March 2009 Print E-mail
Wednesday, 18 March 2009 09:58

The exhibition hall opened at 7am and has been very busy as expected. As suggested by WIS, the organisers, we have been seeing more senior people this year and most seem highly focused on specific issues and are here looking for answers, rather than broad updates. So far the top areas of interest have been:

  • advice on Access Control projects and how to achieve better results or enhance usage

  • lower cost solutions – our Risk Minimiser quarterly remote SoD assessment service has created a lot of interest and we have several companies all over the world to talk to next week about this
  • independent help in security – there seems a much greater focus on avoiding conflicts of interest with people wanting someone other than their outsourcer or auditor involved

SAP has an excellent stand right next to us (to be fair that should probably read we are next to them...) with some very knowledgeable people, and we’re hearing that Access Controls is still way out in front as their most successful product in the Performance Optimisation Applications (POA) area that includes GRC and EPM (Enterprise Performance Management). Too many TLA’s! Interestingly Global Trade Services (GTS) sales seem to have accelerated hard since the GRC event at Amsterdam in November – there are now 600+ clients and we’re hearing more and more interest in this – for SAP and non SAP users, and for intangible exports (IPR, media, etc.).

Teams from su53 Solutions & SAP GRC Support ServicesAs usual we met up with many friends, colleagues, partners, and industry experts – and here you can see SAP’s GRC Support Services Team joining us on the stand for catch up. (Left to right) Gavin Campbell, Jayne Gibbon, Pete Fitzsimmons, Ramelyn Paredes and Vice President Ruby Deol. A great team that are always there when we need!

Headlines from today’s key sessions

The conference kicked off in earnest with a session by John Schwartz and Richard Campione. John introduced us to SAP view of the “New market reality” which is characterised by globality, information explosion, business networks, collaboration, cash management, agility, ROI and search for value. The anecdote about the explosion of data really hit home - there’s 60% more data created now than last year, but without better analytics the data is useless. This will strike a chord with those people who have a RAR report with 1,000,000 lines. Data in itself isn’t the answer, it can often be the problem (and if you need help with large outputs from Access Control check out the su53 Consolidator).

John also made a great point; we need to think transformationally to adapt to the “New market”. The market has changed significantly, incremental steps may not be enough to keep up.

New Market

SAP’s response to the challenges in the New market are categorised as below:
Innovate in products, services and delivery model (even faster than before)

  • Deliver a flexible architecture
  • Expand industry and application coverage
  • Empower business users
  • Deliver best TCO by innovation and un-matched support
  • Enhance the best run ecosystem

John also provided 2 case studies. He identified how Colgate Palmolive is leading the way with a single global instance for ERP and how they use this to their strategic advantage.

We also watched a great case study of the McLaren Formula 1 team. The video Interview with Ron Dennis explained their approach to be calm, focussed, committed and reflect that, whatever the outcome, they have done their best.  The data to the driver through engines uses SAP “ALL-in-one” for automotive. They know the engine life cycle and can decide what to re-use, replace or scrap. Real-time ordering of parts keeps their stocks at the right levels. There is even Real time data from the car back to the factory so they can help tweak performance. Time previously spent processing data is now spent deciding on race strategy. Ron stated “SAP software is at the heart of F1 world championship”

Next up was Richard Campione who took another look at the New Market and the current post Credit Crunch era. He focussed on 2 recent reports from McKinsey and Harvard Business School. The McKinsey report explains that even in times of crisis targeted IT investments can reap great benefits. HBS introduces the concept of digitising your best performer’s process and standards. In this sense it’s all about automating what your best people do manually and use IT as a competitive advantage.

Richard identified the 5 ways that SAP can help organisations through this period:

  • Manage your costs – use SAP Spend analytics to help understand how you are spending your money and quickly identify cost savings
  • Manage your capital – use SAP to manage your receivables better.  A recent Accenture study shows that 25% of debts between companies are disputed. Dow Corning achieved great benefits by a targeted investment:

    • Improve dispute level by 29%
    • Enhanced liquidity by 25%
    • Reduced dispute resolution costs by 50%
  • Maximise your skills and talent:
    • 60% have no success plan in place
    • 80% believe it will be harder to get talent in 3 years time
    • Low performance companies find it 31% harder to attract
  • Manage Enterprise Risk - change thinking away from dedicated risk managers having all responsibility, towards embedding in the business
  • Adaptive planning and reporting – better financial information quicker than your competitors allows planning and budgeting to be done in real time with confidence. Beckman Coulter now plan and budget monthly with live data instead of annual process with disputed figures.

The message is clear, seize the opportunity to leapfrog your competitors or risk being overtaken.

Last Updated on Wednesday, 18 November 2009 15:50
 
More Articles...
<< Start < Prev 1 2 3 Next > End >>

Page 2 of 3
copyright