SAP Governance, Risk, And Compliance (GRC) Solutions Road Map

SAP Governance, Risk, and Compliance (GRC)Solutions Road MapApril 2019PUBLIC

Legal disclaimerThe information in this presentation is confidential and proprietary to SAP and may not be disclosed without the permission of SAP.This presentation is not subject to your license agreement or any other service or subscription agreement with SAP. SAP has no obligationto pursue any course of business outlined in this document or any related presentation, or to develop or release any functionality mentionedtherein. This document, or any related presentation, and SAP’s strategy and possible future developments, products, and platforms, directions,and functionality are all subject to change and may be changed by SAP at any time for any reason without notice. The information in thisdocument is not a commitment, promise, or legal obligation to deliver any material, code, or functionality. This document is provided withouta warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particularpurpose, or noninfringement. This document is for informational purposes and may not be incorporated into a contract. SAP assumes noresponsibility for errors or omissions in this document, except if such damages were caused by SAP’s willful misconduct or gross negligence.All forward-looking statements are subject to various risks and uncertainties that could cause actual results to differ materially fromexpectations. Readers are cautioned not to place undue reliance on these forward-looking statements, which speak only as of their dates,and they should not be relied upon in making purchasing decisions.For all recent and planned innovations, potential data protection and privacy features include simplified deletion of personal data, reportingof personal data to an identified data subject, restricted access to personal data, masking of personal data, read access logging to specialcategories of personal data, change logging of personal data, and consent management mechanisms. 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.2

About SAP road mapsCompanies today are planning their digital journeys – transforming business models, reengineering businessprocesses, and reimagining work.SAP road maps highlight innovations that may help you plan and implement your digital journey. They spanproducts relevant to lines of business in your industry and explain how our innovations may add value to yourbusiness.In our road maps, you can learn about our innovations along four different timelines:1. Recent innovations for our products that have been launched in the past weeks or months and canalready be purchased2. Planned innovations for our products that are intended to be launched in the short term or midterm3. Product direction, providing a long-term perspective on high-level development plans for innovations forour solutions – inspired by your requirements4. Product vision, providing a high-level and long-term business perspective on innovations for our products 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.3

Table of contentsOverview Introduction Product description Product portfolio overviewVision and direction Key trends, customer needs, and value proposition Portfolio areas of future investmentInnovations Recent innovations Planned innovations Product direction Product visionWrap-up 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.4

Overview

SAP governance, risk, and compliance (GRC) solutionsIntroductionSAP GRC solutions help companies to streamline and automate riskmanagement and compliance processes across the enterprise.Tightly integrated into SAP and non-SAP processes, SAP GRC solutions andproducts help our customers worldwide to establish efficient, effective, andreal-time GRC practices.Integrated GRC product suite Document, manage, analyze, and report on all GRC activities in a central environment Scale the GRC system over time to keep up with the demand from your business Build on industry standards and best practicesEmbedded into SAP and integrates with other business applications Streamline and automate GRC workflows to avoid duplicate effort and reduce costs Connect GRC information with operational data to ensure information presented tostakeholders is up-to-date and relevantState-of-the-art technology Leverages in-memory capabilities of SAP HANA for real-time detection and analytics Uses SAP Fiori to provide a seamless user experience across all devices 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.6

SAP GRC solutionsKey capabilities Documentation: Central repository to document and manage all GRCactivities across the organization Integration: Data integration of SAP and non-SAP systems that helps toautomate GRC processes Reports and dashboards: Prebuilt reports and dashboards to help stay ontop of GRC tasks and provide a consolidated view for GRC stakeholders Workflow: Streamlining GRC tasks, status follow-ups, and approvals Best practices: Continuous adoption of industry standards and bestpractices 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.7

SAP GRC solutionsProduct portfolio (select rom SAPSAP CloudPlatformThird-partysystemsNative SAP integrationand integrationwith non-SAPCloudSafeguard thedigitaltransformationIn-memoryBe a trustedadvisor to thebusinessSAP Cloud IdentityAccessGovernanceSAP Watch ListScreeningSAP Data PrivacyGovernanceGovern access in thecloudVerify business partnercomplianceAddress today’s dataprivacy challengesSAP AuditManagementSAP BusinessIntegrity ScreeningSAP TaxComplianceTransform audit beyondassuranceImplement efficient frauddetectionComply with oBextensionsOn premiseSAP AccessControlSAP ProcessControlSAP RiskManagementManage access riskEnsure effective controlsand ongoing complianceManage enterprise riskacross the organizationEstablish GRCbest practicesEcosystem 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.8

Vision and direction

SAP GRC solutionsKey trends, customer needs, and value propositionDigitaltransformationNew businessmodelsRegulatoryrequirementsEconomic andpolitical uncertaintyAssure compliance acrosson-premise, cloud, andhybrid landscapesSafeguard profitability andgrowth without compromisingon complianceDeal with increasingamount and complexity ofregulations to be followedMitigate external andstrategic riskSAP GRC solutions help tosafeguard on-premise, cloud,and hybrid landscapes.SAP GRC solutions helpto adapt existing processesand procedures withoutcompromising on compliance.SAP GRC solutions helpto streamline complianceprocesses and addressregulatory requirements.SAP GRC solutions helpto add risk and complianceinformation to improvestrategic decisions. 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.10

SAP GRC solutionsProduct or portfolio areas of future investmentUser experienceConsumptionEmbedded complianceAcross all devicesCloud or on premiseBusiness processes integration Support for GRC experts and thebusiness Solutions and products built for thecloud and on premise Tightly integrated into processesand business networks Solutions and products built to“manage” the cloud 2019 SAP SE or an SAP affiliate company. All rights reserved. ǀ PUBLICThis presentation and SAP‘s strategy and possible future developments are subject to change and may be changed by SAP at any time for any reason without notice. This document is provided without a warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability, fitness for a particular purpose, or noninfringement.11

Innovations