March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide...

32
This education program has been approved for 34 CPE credits Advance your career and keep your certification current. Earn credits by attending sessions offered at GRC 2014. March 18–21 • Orlando The premier event for SAP ® governance, risk, audit, and compliance www.grc2014.com SAPinsider events @InsiderGRC | #GRC2014 REGISTER BEFORE March 16, 2014 SAVE up to $ 200 PER PERSON

Transcript of March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide...

Page 1: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

This education program has been approved for 34 CPE creditsAdvance your career and keep your certification current. Earn credits by attending sessions offered at GRC 2014.

March 18–21 • Orlando

The premier event for SAP® governance, risk, audit, and compliance

www.grc2014.com SAPinsider events @InsiderGRC | #GRC2014

REGISTER BEFORE March 16, 2014

SAVE up to

$200PER PERSON

Page 2: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

2

Join us

Now that growth has returned to most economies, companies are once again intent on growing their revenues and ensuring that an increase in sales also delivers a commensurate increase in profits. Finance has a major contribution to make in helping shape and execute strategy, tracking performance to ensure that the financial commitments made to stakeholders are achieved and in managing resources so that emergent growth opportunities receive sufficient funding to develop into meaningful cash flows.

Becoming a business partner will involve Finance becoming something of a “juggler” who is adept at managing multiple roles and new responsibilities because we can be sure that the pressures for more effective compliance and risk management will continue to grow — and there is the ever-present need to run financial operations and accounting functions as efficiently and cost-effectively

as possible. Being successful in these roles requires a Finance function that is attuned to opportunities and changes in the business; provides business partners with instant analysis and insightful recommendations — and recognizes that users increasingly expect to be able to access and act on information instantly no matter where they happen to be. Already companies are investing in the newer technologies such as “Big data,” cloud computing, real-time analytics, and mobility that allow Finance to transition from a juggler to a ring-master who can confidently orchestrate achieving financial objectives with successfully managing risk, and compliance and the smooth running of financial operations.

At GRC 2014 and Financials 2014, our aim is to help you navigate these challenges and new technologies by showcasing best practices from your peers and industry thought-leaders and by giving you deep and practical insight into SAP’s growing portfolio of finance, risk and compliance, and analytics solutions. You will leave with a rich understanding of SAP’s vision and roadmaps spanning accounting and financial management, business intelligence, treasury and financial risk management, travel and expense management, invoice-to-pay, receivables management, enterprise performance management, and governance, risk, and compliance processes.

This event is your opportunity to network with colleagues who face the same challenges you are facing and to directly access SAP solutions experts to help you understand how you can meet your specific business goals. I hope that you will join me, your peers, and the SAP community of experts in Orlando to engage in a rich debate and ensure that you are equipped for success.

Sincerely,

James FisherVice President MarketingAnalytics and Finance, SAP

SchedulePre-conference

March 17 Conference, March 18–21

Monday, March 17

7:30 am Registration opens

9:00 am Pre-conference workshop sessions

12:00 pm Lunch

2:00 pm Pre-conference workshop sessions

5:00 pm Registration closes

Tuesday, March 18

7:00 am Registration opens and Continental breakfast

8:30 am Keynote address

10:00 am Refreshment break

10:30 am Breakout sessions

11:45 am Lunch

1:00 pm Breakout sessions

2:15 pm Refreshment break

2:30 pm Breakout sessions

3:45 pm Refreshment break

4:00 pm Breakout sessions

5:15 pm Welcome reception

5:30 pm Ask-the-Experts

6:15 pm Day concludes

Wednesday, March 19

7:30 am Registration opens and Continental breakfast

8:30 am Breakout sessions

9:45 am Refreshment break

10:00 am Breakout sessions

11:15 am Refreshment break

11:30 am Breakout sessions

12:45 pm Lunch

2:30 pm Breakout sessions

3:45 pm Refreshment break

4:00 pm Breakout sessions

5:15 pm Cocktail reception

5:45 pm Ask-the-Experts

6:30 pm Day concludes

Thursday, March 20

7:00 am Registration opens and Continental breakfast

8:30 am Breakout sessions

9:45 am Refreshment break

10:15 am Breakout sessions

11:30 am Lunch

12:45 pm Breakout sessions

2:00 pm Exhibitor Meet and Greet

2:45 pm Breakout sessions

4:00 pm Refreshment break

4:15 pm Breakout sessions

5:30 pm Refreshment break

5:45 pm Breakout sessions

7:00 pm Day concludes

Friday, March 21

7:30 am Registration opens and Continental breakfast

8:30 am Breakout sessions

9:45 am Refreshment break

10:00 am Breakout sessions

11:15 am Refreshment break

11:30 am Breakout sessions

12:45 pm Conference concludes

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 3: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

3

OverviewPre-conference Workshops, Monday, March 17

Conference, March 18-21 • 10 comprehensive tracks

Track 1 Strategies, trends, and updates in GRC Page 11

Track 2 Security and control optimization Page 13

Track 3 Access governance and segregations of duties Page 15

Track 4 Continuous monitoring and process control Page 18

Track 5 Risk management Page 21

Track 6 Implementing, upgrading, and integrating GRC solutions Page 22

Track 7 GRC reporting and analysis Page 24

Track 8 Audits and assurance Page 25

Track 9 GRC for finance teams Page 27

Track 10 Legal and regulatory updates Page 30

Special three-hour, pre-conference sessions hosted on this day offer you the opportunity to fortify your understanding of key SAP concepts and technologies, explore new trends and strategies, and enhance your learning experience at the main conference. Advance sign-up is required.

Page 5

Advance your career and keep your certification current. Earn 34 CPE credits by attending sessions offered at GRC 2014 and Financials 2014. No prerequisites or advanced preparation required. *Sessions are presented via a Group Live format. The National Association of State Boards of Accountancy (NASBA) awards CPE credits in:

Accounting

Accounting (Government)

Auditing

Business Management and Organization

Management Advisory Services

Finance

Computer Science

*Attendees must have a basic knowledge of an SAP system, and an understanding of the Financials function in an organization. SAPinsider is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.learningmarket.org. If you have any concerns or complaints, please contact customer service at +1-781-751-8700. Visit our Registration page to sign up for the event.

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 4: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

4

More than 175 educational sessions and forumsExpand your skills and knowledge by learning from the top experts at SAP, independent consultants, and your industry counterparts.

Pre-conference WorkshopsSpecial three-hour, pre-conference sessions hosted on this day offer you the opportunity to fortify your understanding of key SAP concepts and technologies, explore new trends and strategies, and enhance your learning experience at the main conference. Advance sign-up is required.

Ask-the-ExpertsPull up a chair in the Ask-the-Experts area of the Exhibit Hall during our Tuesday and Wednesday evening receptions and spend one-on-one time with the top experts. Learn from their real-world expertise and get specific insights on topics and questions that matter to you most.

Live GRC solution demonstrationsSee demonstrations and hear directly from SAP and leading vendors about GRC innovations and their impact on SAP applications you want to extend, develop, or introduce to your employees and customers.

Customer-led case studiesTake away best practices and methodologies taught by the companies that practice them. Learn from highly experienced SAP customers to solidify your own strategies and tactics.

Interactive discussion forumsThese forums are informal, interactive get-togethers where SAP customers with similar interests, projects, and challenges can gather to talk about specific topics. Each topic will be facilitated by a subject-matter expert. You do not need to sign up in advance to attend, and there is no formal agenda. Just have a great discussion with people who share your concerns and interests.

Solutions showcase theatersStop by the exhibit hall throughout the event to see solution demonstrations, participate in interactive discussions with speakers, and attend microforums.

Speed NetworkingYou’ve heard of speed dating, now try speed networking! Participants will have 5 minutes to make their initial introductions and converse before moving on to meet another contact. An emcee will provide instructions and keep things moving. Speed networking will take place on Wednesday, March 19 from 7:30 am - 8:15 am. Please sign up at the registration desk upon check-in if you’d like to participate.

Exhibit Hall receptionsInteract with the best and the brightest minds working with SAP software. Build a lasting network of peers and meet with leading product and service vendors.

Hands-on labsRoll up your sleeves and get valuable hands-on experience with the latest technologies from SAP. Experts will guide you through step-by-step exercises to help you develop a comprehensive understanding of each solution’s functionality and arm you with skills you can use right away.

Co-located eventsGRC 2014 is hosted with Financials 2014. Registration at one conference admits you to both events. It’s a perfect opportunity to educate your entire team.

Luncheon roundtablesSit with your colleagues by topic area, industry, or job function and discuss solutions to your most difficult problems. Learn about the projects your colleagues are tackling, what strategies they’re using, and why.

Distinguished facultySpeakers at this conference are the world’s foremost GRC experts. Cutting-edge technologists, university professors, industry executives, and product experts will be on hand to provide the very best instruction.

SAPexperts LIVEThis popular forum offers attendees the opportunity to meet leading authors from the SAPexperts GRC hub and discuss topics from recent articles. Follow the framework of the article as the author guides you through the most important parts. You’re not just a reader – you’re a participant.

Educational and networking opportunities

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 5: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

5

Pre-conference Workshops Sessions

Morning sessions • 9:00 am – 12:00 pm

A technical guide to continuous control monitoring with SAP solutions for GRC page 6

Get the most out of financial accounting in SAP: Proven tips and techniques to better manage core processes page 6

SAP Business Planning and Consolidation 10.0: Tricks, tips, and lessons learned page 7

A step-by-step guide to execute a faster financial close and disclose process: Tasks and tools every finance team should know

page 7

Lunch • 12:00 pm – 2:00 pm

Afternoon sessions • 2:00 pm – 5:00 pm

A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in SAP solutions for GRC page 8

How to improve your existing CO solution and achieve more efficient managerial accounting page 8

Hands-on lab: Leveraging SAP Business Planning and Consolidation 10.0, version for SAP NetWeaver® powered by SAP HANA®, to derive maximum value during planning, budgeting, forecasting, and consolidations

page 9

How to accelerate financial and managerial accounting processes using SAP HANA page 9

Pre-conference Workshops continued on next page

Pre-conference workshops are in-depth, 3-hour sessions designed to help build a solid foundation of knowledge in critical topics. Through a combination of demos, lecture, discussions, and Q&A, you’ll develop a comprehensive understanding of important topics quickly.

Our instructors have vast experience in their respective fields. The tips, insights, and best practices that they’ll share with you come from practical, in-the-trenches experiences, not just books and theory. They are also accessible and open to answering questions about your most pressing challenges.

Your workshop registration fee gives you access to two information-packed sessions; one in the morning and one in the afternoon. You’ll leave both sessions with all the presentation materials, demos, handouts, and any other resources that are prepared by the instructor.

You’ll also leave with greater knowledge and confidence, and you’ll be ready to go further in-depth on these topics throughout the rest of the event.

Join us for Pre-conference Workshops Monday, March 17

Pre-conference Workshops

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 6: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

6

Get the most out of financial accounting in SAP: Proven tips and techniques to better manage core processesPaul Ovigele, Ovigele Consulting

This three-hour session provides lessons to identify and exploit frequently overlooked financials functionality and will help even the most experienced finance teams streamline core financial accounting processes in SAP. Drawing on real-world examples, the speaker will illustrate how to:

y Implement little-known settings to vastly improve the format and usability of reports — no custom programming required!

y Maintain and control master data objects in order to improve hierarchical maintenance of general ledger accounts and safeguard sensitive fields in the customer and vendor master

y Enable the entry of multiple account assignment objects on a purchase order line item

y Set up SAP General Ledger accounts for retroactive Line Item Display and Open Item Management by using standard transactions

y Use worklists to help reduce the time and effort needed to process financial transactions

Morning sessions • 9:00 am – 12:00 pm

Pre-conference Workshops

A technical guide to continuous control monitoring with SAP solutions for GRCJan Gardiner, Atul Sudhalkar, and Thomas Frénéhard, SAP

This three-hour comprehensive session provides a detailed guide to the continuous controls monitoring methodologies, deployment strategies, and latest tools available with SAP solutions for GRC. By attending, you will:

y Explore the enhanced capabilities of the automated monitoring framework in SAP Process Control 10.1

y Examine the automated business rule functionality, such as pattern analysis and BRF+, and its role in setting up or improving continuous controls monitoring efforts

y Learn how to use change log monitoring to reconstruct past settings of key configurations and master data settings

y Navigate the range of monitoring methods available, with a discussion of the benefits and limitations of each

y Explore methods to leverage BRF+ functionality to build powerful monitoring rules

y Understand the dos and don’ts of applying various automated business rules within your controls environment

y Learn advanced techniques for adding rule criteria, filters, and other special features to your business rules

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Pre-conference Workshops continued on next page

Page 7: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

7

SAP Business Planning and Consolidation 10.0: Tricks, tips, and lessons learnedScott Cairncross and David Dixon, TruQua Enterprises

Whether you are looking to upgrade to SAP Business Planning and Consolidation 10.0 from a previous version, are deploying it out of the box, or have been using the tool for some time, this comprehensive three-hour session provides insights and best practices derived from multiple SAP Business Planning and Consolidation 10.0 projects. You will:

y Learn how to determine the sequence of installation, upgrade, or integration steps for SAP Business Planning and Consolidation while taking into account your existing SAP environment

y Understand the upgrade and implementation alternatives for a stand-alone deployment, an add-on approach, and support pack options

y Get tips for migrating from the 7.0 and 7.5 releases to 10.0, including what areas will require the most effort — such as transitioning your data

y Get advice on how to strategically phase out unsupported, or unneeded, solutions

y Get details on the SAP HANA migration path from SAP NetWeaver BW and SAP NetWeaver BW Accelerator and how it compares to a traditional database migration effort

A step-by-step guide to execute a faster financial close and disclose process: Tasks and tools every finance team should knowStefan Karl, SAP AG and Jason Reid, Pete Graham, and Kirk Anderson, SAP

Is your financial close slower than it was five years ago? What if you could shave days off the time it takes to close your books? Attend this comprehensive session to learn what steps your organization can take today to speed up the process. Attendees will:

y Learn the most common barriers to a fast financial close — such as data quality and collection errors, intercompany reconciliation problems, and poor performance from reporting applications — and strategies to overcome them

y Get tips for preparing a checklist for the financial close, which contains task, task owners, and deadlines

y Understand trends in managing disclosures and why bringing this process in-house rather than

outsourcing it provides greater control

y Find out which closing steps should be shifted into the pre-closing period and which can be delayed until later in the process

y Find out how automating procedures such as currency translation, eliminations, and cash flow calculations can help speed up the close

y Get an overview of what new SAP functionality is available to help accelerate the process

Morning sessions • 9:00 am – 12:00 pm

Pre-conference Workshops

Pre-conference Workshops continued on next page

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 8: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

8

How to improve your existing CO solution and achieve more efficient managerial accountingPaul Ovigele, Ovigele Consulting

Learn how to make the most of your investment in SAP functionality for managerial accounting and controlling. This session walks you through proven tips and techniques that you can use to increase the value of your CO landscape, without the need for any new functionality or external consulting assistance. Hear firsthand practical tips to:

y Reduce the clutter in your cost estimate screens

y Transfer financial accounting documents retroactively into your profitability analysis functionality

y Execute enhanced reports that help you to reconcile your inventory balances

y Analyze what has happened in the material ledger during the month by using the material price analysis transaction

y Run product drill-down reports without configuration

y Create CO product groups that allow you to define your own hierarchy

y Pinpoint new functionality in SAP enhancement package 6 that’s now available to help streamline profit center and segment reorganization

Afternoon sessions • 2:00 pm – 5:00 pm

Pre-conference Workshops

A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in SAP solutions for GRC Sarma Adithe and Saye Arumugam, SAP

Walk through the latest features and capabilities of the new workflow engine in the latest version of SAP solutions for GRC (10.1) and learn how to configure SAP Access Control to integrate SAP Smart Business forms and SAP Fiori Fact Sheets into your appli-cation. During this session, you will explore:

y How to create the most common workflow scenarios using table operations and decision tables

y The capabilities and flexibilities of the multi-stage, multi-path (MSMP) workflow, including rules, agents, paths, and variables

y How to configure workflows by using information from standard and custom tables in BRF+ using DB calls

y Business rule framework+ (BRF+) agent rules that can be used to replace customer approver determinations

y Undocumented tips and tricks to incorporate BRF+, initiator, and routing rules into your MSMP workflow implementation

y A full technical overview of SAP Fiori Fact Sheets and SAP Smart Business forms for SAP Access Control

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Pre-conference Workshops continued on next page

Page 9: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

9

Hands-on labLeveraging SAP Business Planning and Consolidation 10.0, version for SAP NetWeaver powered by SAP HANA, to derive maximum value during planning, budgeting, forecasting, and consolidationsBruno Ranchy, SAP Labs and Damien Fribourg, SAP

This hands-on session provides step-by-step instruction to set up and use SAP Business Planning and Consolidation 10.0, version for SAP NetWeaver powered by SAP HANA:

y Learn how to use standard reporting and formatting functionality, including the new Web client

y Practice leveraging the new SAP enterprise performance management (EPM) 10.0 Microsoft Excel and Web reporting functionality

y Explore the best ways to create and use input schedules, data import capabilities, and drill through to BEx and Business Process Flows (BPFs)

y Extend planning activities by taking advantage of recent optimizations delivered by the SAP HANA platform

y Practice using new, enhanced financial consolidation functionality, including the consolidation monitor, journals, ownership management, and controls

y Step through the creation of SAP BusinessObjects™ Dashboards (formerly Xcelsius®) leveraging BPC data for greater financial analysis and data visualization

How to accelerate financial and managerial accounting processes using SAP HANABirgit Starmanns, SAP and Carsten Hilker, SAP America

Attend this session and learn how the latest breakthrough in-memory technology provided by SAP HANA can now be seamlessly integrated into your existing SAP ERP system architecture for more efficient accounting. During this session, you will:

y Learn what steps you can take to speed up and extend your current SAP ERP managerial accounting, financial reporting, and critical period-end close processes

y Learn how to complete a non-disruptive adoption of ERP applications, using examples like profitability analysis (CO-PA), overhead management (CO-OM), material ledger (CO-PC-ACT), and general ledger (FI-GL)

y Find out what advantages and benefits can be realized as a result of using SAP HANA as a secondary database

Afternoon sessions • 2:00 pm – 5:00 pm

Pre-conference Workshops

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 10: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

10

Keynote AddressLeading your organization to financial brillianceChristian Rodatus

Financial Excellence. Transforming Finance. Finance Innovation. You’ve seen these themes – per-haps too many times. Nearly every finance organization is pushing to achieve higher objectives. And leaders are continually driving for strategic change. But you can’t overlook today’s obligations: regulatory reporting, operations, compliance and more. In this keynote, Christian Rodatus wel-comes a panel of thought leaders that will share their points-of-view on how to manage today’s requirements while meeting tomorrow’s objectives. Attend this informative keynote to learn how SAP solutions for finance can help turn today’s vision into tomorrow’s realities.

GRC Spotlight SessionSAP solutions for governance, risk, and compliance (GRC): Product updates, strategy, and roadmapKevin McCollom, SAP

SAP continues to invest in solutions that enable customers to proactively prevent risk events and compliance violations. During this session, you will:

• Hear how the latest innovations in SAP’s solutions for governance, risk, and compliance help to protect the value of your organization

• See how the newest solution powered by SAP HANA added to the GRC portfolio is designed to support the needs of internal audit teams

• Learn what’s new in GRC 10.1 and hear examples of how customers are leveraging the latest innovations in SAP’s solutions for GRC to maximize business performance and sharpen their competitive edge, and how you can do the same

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 11: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

11

Governance, Risk & ComplianceGRC2014

Strategies, trends, and updates in GRCGRC Spotlight Session

SAP solutions for governance, risk, and compliance (GRC): Product updates, strategy, and roadmapKevin McCollom, SAP SAP continues to invest in solutions that enable customers to proactively prevent risk events and compliance violations. During this session, you will:

y Hear how the latest innovations in SAP’s solutions for governance, risk, and com-pliance help to protect the value of your organization

y See how the newest solution powered by SAP HANA added to the GRC portfolio is designed to support the needs of internal audit teams

y Learn what’s new in GRC 10.1 and hear examples of how customers are leverag-ing the latest innovations in SAP’s solutions for GRC to maximize business performance and sharpen their competi-tive edge, and how you can do the same

Actionable advice for calculating the ROI of your GRC project and sustaining your investmentSteven Oberhauser, KPMGThis session helps you answer the critical ques-tion: How will my SAP GRC implementation translate into financial and business benefit? Explore a variety of case studies that illustrate the financial and operational benefit of SAP solutions for GRC and explore:

y A detailed look at how to measure suc-cess using key performance indicators (KPIs) and benchmarks such as key drivers of compliance mandates

y How to utilize those benchmarks to establish the business value of your GRC initiative and assist you in planning your own projects better

y Critical advice to help you build your busi-ness case and GRC implementation budget

Strategies to centralize, consolidate, and streamline your SAP GRC system and compliance effortsJames Roeske, Customer Advisory GroupMany companies today suffer from disjointed and decentralized compliance environments resulting in complex, costly, and inconsis-tent GRC environments. This includes having several compliance tools, different compli-ance processes, and even multiple instances and versions of SAP GRC applications running within their organizations. Attend this session and learn:

y What functionality exists in SAP solutions for GRC 10.0 and 10.1 to facilitate central-ization and consistency among GRC processes such as centralized emergency access management, mitigation assign-ments by system, and rule set management and configuration

y Key compliance process improvements which can be made to help enforce com-pliance and auditability

y What SAP GRC infrastructure and change control opportunities and options for sim-plification exist within your current system

Panel discussion

How companies leverage SAP solutions for GRC to safeguard assets, prevent fraud, and comply with complex regulationsModerated by: David Cargile, KPMG Panelists: Mark Feiner, Tyson Foods, Danielle Bass, Citrix, Beth Longest, MeadWestvaco, Kent Cowsert, KPMGAttend this lively discussion to hear ideas, experiences, and perceptions — from panel members representing various business functions — regarding opportunities compa-nies can leverage to benefit from SAP solutions for GRC. Discussion will focus on:

y Strategic and tactical decisions and align-ment required for leading-class SAP solutions for GRC implementations and initiatives

y Change management tactics and tips to close the gap between diverse business units post-rollout to maximize ROI on GRC technologies

y How to use strategic enablers and tools successfully during and after a GRC technology implementation

How to detect and investigate fraud for improved business processesTomás Kong, SAPWith the amount of data growing exponen-tially every day, this session explores how SAP Fraud Management can help you keep up with changing behaviors and patterns in fraud and misuse of corporate assets to ensure that your operations run efficiently. During this session, you will:

y Gain in-depth understanding of technical considerations that are key success fac-tors for an expert GRC fraud management implementation

y Understand the planning, scoping, real-ization, as well as integration aspects of the GRC solution portfolio – not only from an IT, but also from a business perspective

y Learn firsthand from experts about the top technical tips and tricks and how to take your project and audit activities to the next level

Track 1

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Track 1 continued on next page

Page 12: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

12

Recent enhancements and innovations for SAP Access Control featuring SAP HANA Live and SAP Smart BusinessPaul Selby, SAPSAP HANA, SAP HANA Live and SAP Smart Business, and SAP Fiori™ present many new opportunities for SAP Access Control custom-ers. Attend this session to learn more about these technologies, what they mean for your business, and how you can start using them. Find out:

y How to leverage these technologies for advanced analytics and improved busi-ness process performance

y What’s coming on the innovation road-map for SAP Access Control

y Which new apps that have been devel-oped on these platforms for SAP Access Control customers, including SAP Identity Analytics and the Access Compliance Dashboard

Aligning GRC with the revised COSO Internal Control-Integrated FrameworkChristal Metz, EY The COSO Internal Control-Integrated Frame-work is a standard for internal controls that many organizations have successfully adopted and created internal control policies, pro-cedures, and activities around. Attend this session to:

y Understand the latest developments with the COSO Internal Control-Integrated Framework

y Prepare for change by developing a deeper understanding of the framework gaps that need to be addressed

y Walk through strategic steps for aligning your internal control structure to the new framework

y Obtain instruction and learn how imple-menting SAP solutions for GRC provides the opportunity to improve alignment to this framework and strengthen your asso-ciated internal control components

Live demo

SAP Fraud ManagementTomas Kong, SAPAttend this product demo to get insight into SAP’s latest plans for a new fraud management solution that will enable you to detect, investi-gate, analyze, and prevent fraud by combining analytics with the speed of SAP HANA. Learn how to:

y Quickly adapt to evolving fraud patterns and enhance prevention with improved fraud strategy management

y Reduce the risk of fraud with advanced analytic capabilities and greater visibility

Where are you now and where do you want to be on the roadmap of compliance?James Roeske, Customer Advisory GroupThis session highlights and explains the many steps companies must take to stay on the right path to compliance, such as ensuring efficient security and GRC technologies, staying one step ahead of fraudsters, and satisfying the requirements of auditors. Explore:

y The typical journey and evolutionary path a GRC customer goes through during the lifecycle of becoming and staying compliant

y Specific SAP solutions for GRC 10.0 func-tionality that will allow you to achieve short- and long-term compliance goals

y Real-world insight based on 160+ GRC customer implementations, including key tips to enhance ROI and boost levels of success at different stages of the GRC path

Track 1: Strategies, trends, and updates in GRC

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 13: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

13

Track 2

Security and control optimizationSetting up security authorizations in SAP Process ControlMarc Jackson, Turnkey ConsultingThe way in which security and authorizations operate in SAP Process Control is different than other SAP applications. This session provides a crash course in SAP Process Control security to ensure you are providing the right people with the right access at all times in your system. By attending, you will learn:

y The elements which make up the authori-zation concept in SAP Process Control and how they interact with each other

y The authorization concept within SAP Process Control, including related config-uration and master data elements, and how it interacts with reporting and workflow

y How your organization can put in place an authorizations strategy to optimize and secure your compliance processes

SAP security Part 1: A beginner’s guide to SAP Access Control and fundamental security concepts within SAP ECCRaymond Mastre, PwCThis session offers attendees with little or no previous knowledge of SAP ECC security the fundamentals for implementing a sound security architecture and design. During this session, you will:

y Get a detailed overview of each module within SAP Access Control, as well as a live demo that highlights the key areas that are important from an audit and compli-ance perspective

y Examine core security concepts within SAP such as roles, profiles, authorizations, fields, and values

y Understand the key differences and driv-ers between a task-based and job-based security methodology and tips for choos-ing the right method for your organization

Take home a list of standard delivered SAP tables and ways to incorporate them into your security approach.

SAP security Part 2: Advanced concepts for SAP Access Control and SAP ECC security and designRaymond Mastre, PwCLooking for more advanced tips to enhance your SAP Access Control implementation? In this session, learn some of the more advanced security concepts, settings, and options in SAP Access Control and get detailed advice to:

y Use the BRF+ rule engine to customize processes, such as complex role approvals in SAP Access Control

y Adjust and modify the user interface of SAP Access Control more efficiently

y Set up and utilize business roles and link those roles to multiple systems without the need to go through a transport process

y Complete a security benchmarking exer-cise for an immediate view of how your design rates against your peers

Case study

Redesigning security at Stanley Black & Decker: How to create a more centralized and automated security process Lori Groth, Stanley Black & DeckerGet a picture of how Stanley Black & Decker conducted a global redesign of security from the ground up, resulting from manual security processes, ineffective role design, and inconsis-tent security policies. Hear firsthand how the company:

y Revamped its customized segregation of duties rule set in SAP Access Control so that it better aligned to business risks and overall risk tolerance

y Instituted a new global security gover-nance model for all SAP environments

y Replaced existing SAP roles with new task-based global roles free of SOD conflicts

y Created a new access control architecture which included upgrading from SAP Access Control 5.3 to version 10 and cre-ating a three-tiered landscape

y Automated manual user provisioning pro-cesses using GRC 10.0 access controls

Performance optimization tips to turbo charge your access control systemKehinde Eseyin, Turnkey ConsultingPerformance optimization is a key phenome-non that is central to the productive use of any system, including SAP Access Control. Perfor-mance issues might arise as a result of setting up the system landscape without adequately sizing the infrastructure requirements. Attend this session and learn:

y The primary causes of performance bot-tlenecks in SAP Access Control

y Key sizing guidelines and capacity plan-ning strategies that should be implemented

y What performance-centric configuration settings, data management techniques, memory management, and system main-tenance activities can help alleviate system bottlenecks

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Track 2 continued on next page

Page 14: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

14

5 steps for building an effective SAP control optimization frameworkMichael Kosonog, DeloitteWalk through five required attributes to effec-tively track the SAP control optimization activities at your organization. Gather tips and tricks for applying the appropriate governance and organizational recommendations within your current control environment to increase adoption and sustainability of optimization efforts. During this session, learn:

y How to align roles for internal audit, busi-ness owners, and controls resources for SAP controls optimization

y Various approaches to controls optimiza-tion, including top-down and bottom-up approaches

y What opportunities for technology enablement may exist in your organiza-tion, including controls automation, controls testing, and how SAP GRC 10.1 can be used in these efforts

y Important considerations for global implementations and localization require-ments during rollout

SAPexperts LIVE Integrate SAP Access Control 10.0 with SAP ERP Human Capital Management (HCM) Alpesh Parmar, ultimumITDon’t miss this opportunity to personally meet Alpesh Parmar, an SAPexperts GRC advisor and Managing Partner at ultimumIT. Engage in an in-depth discussion about one of his most widely read articles from the GRC hub of the SAPexperts knowledgebase — the leading publication and knowledgebase for organizations that leverage SAP solutions for governance, risk, and compliance. Learn how to configure SAP Access Control 10.0 to inte-grate with SAP ERP HCM. Take advantage of the HR Trigger functionality in SAP Access Control 10.0 to automatically provision and de-provision access via HR event triggering. You’ll receive a copy of the article — free of charge — and engage with peers who have the same interests and priorities.

Integrate SAP Access Control with identity management to enable enterprise-wide compliant user provisioning James Rice, Greenlight TechnologiesThis session provides best practices for lever-aging SAP Access Control as the risk and policy engine in order to provide preventative com-pliance checks prior to provisioning risky access across business applications. Examine why and how to integrate GRC into the iden-tity management lifecycle in order to enhance your existing access request process with pre-ventative segregation of duties risk analysis and compliant provisioning and learn how to:

y Enable policy checks during the access request and approval process

y Ensure compliant user access across SAP and enterprise applications

y Enable risk management as part of the periodic access certification process

y Apply mitigating controls to risky access when approved and granted

Case study

How Mars kick-started its global SAP security governance programLinden Glen, Mars Hear a firsthand account of how Mars built a comprehensive strategy to address ineffi-ciencies in its entire SAP access management process. Listen in as Mars shares examples of its “Get it Right” and “Keep it Right” two-step strategy. Learn how Mars:

y Created a customized segregation of duties rule set and involved key stake-holders in developing it

y Rolled out a robust and automated provi-sioning process (access request management) and replaced existing leg-acy processes and applications

y Implemented a complementary security role architecture and utilized the business role management tool to sustain the process

y Implemented a supporting, but minimal, organization to ensure proper gover-nance was in place

Simplify SAP security with a comprehensive governance strategy Shyamala Aysola, EYGain an understanding of the leading practices and strategies to implement a more stream-lined governance model within your SAP environment. During this session, learn:

y What security and governance standards your organization will need to abide by to remain in compliance with key govern-ment regulations

y What reviews will need to be performed on an ongoing basis to keep up with a more strategic and planned out approach, and how to implement such an approach

y How to survive the post-go-live support challenges that can occur once you’ve implemented an updated governance model

Track 2: Security and control optimization

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 15: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

15

Track 3

Access governance and segregations of dutiesIntegrating SAP Access Control and identity management: Best practices and lessons learnedChris Radkowski, SAPMany customers today are looking to com-bine processes for managing identities with application governance for their enterprise applications and IT systems. Attend this ses-sion to:

y Learn how to properly integrate SAP Access Control and identity management solutions to establish an integrated end-to-end process that automates permission assignments in IT systems

y Get tips to orchestrate complex approvals and compliance requirements necessary for business applications

y Examine available integration scenarios for SAP Access Control along with best practices to successfully complete the integration

y Hear lessons learned from recent SAP Access Control customers and identify management integration projects as well as the roadmap for future integration with identity management solutions

Maximizing your SAP Access Control investment: How to get the biggest bang for your buckErin Hughes, SAPIf you’re only leveraging SAP Access Control today to run risk analysis and conduct firefight-ing activities, odds are you’re not maximizing your investment. Explore the full range of SAP Access Control capabilities and learn how to:

y Leverage automation and preventative capabilities across your business applica-tions in order to maximize cost

y Add user provisioning and role manage-ment capabilities to your enterprise systems, including access request self-ser-vice, approvals, compliance checks, proactive resolution of access controls, and provisioning

y Extend the reach of SAP Access Control beyond your ERP system to benefit from a centralized process

y Build the business case to expand your use case or upgrade to the latest release

Panel discussion

SAP Access Control customers share their successes and lessons learnedModerator: Erin Hughes, SAP Panelists: Norma Joe, Kraton Polymers; Neil Chua, Dolby Laboratories; Lorna Schnauber, Rowan CompaniesParticipate in this candid, moderated dis-cussion with SAP customers who will share detailed insight, best practices, and lessons learned from their experiences with SAP Access Control. Find out how these leading organizations are working to:

y Automate the process of analyzing users and roles for segregation of duties (SoD) and critical access risks and moving to a preventative, rather than reactive, approach

y Measure the success of GRC efforts and troubleshoot implementation challenges through the pre-project business case development, project realization, and go-live phases

y Reap the benefits of including SAP Access Control in their initial SAP ERP implemen-tation to immediately address security risk

How to facilitate the user access request process in SAP Access ControlJonathon Pasquale, KPMGThis session delivers techniques, tips, and tricks to configure and fully utilize access pro-visioning tools and to automate user access approvals in SAP. By attending, you will learn:

y Guiding principles, detailed configuration, and practical application techniques for managing the access request process in SAP solutions for GRC 10.0

y What features should be utilized for a suc-cessful access request process such as user request provisioning, super user priv-ilege management provisioning, and user access reviews

y How to design your security strategy so its optimally configured for better user access management

y How to help reduce the complexity and increase the accuracy of the request process

Practical tips for updating your rule set and mitigating the control library James Roeske, Customer Advisory GroupAre you confident that your segregation of duties rule set and mitigating controls are up to date and covering the current compliance requirements and functionality in your sys-tem? This session will go step by step through the process of evaluating your rule set for com-pleteness and accuracy and will outline:

y Tips and tricks for doing a rule set and mitigation control assessment and mod-ernization project using resources you already have

y Detailed examples of mitigating control standards, processes, and content requirements

y Insights into SAP solutions for GRC ver-sions 10.0 and 10.1 functionality that can be used to assist in rule set and mitigation validation and long-term maintenance

y Best practice options for rule set and miti-gation process policies to keep them consistent and up to date

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Track 3 continued on next page

Page 16: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

16

Track 3: Access governance and segregations of duties

Track 3 continued on next page

Top 10 lessons for getting the most out of SAP Access Control Gavin Campbell, IntegrcThis session details experiences from a pleth-ora of SAP Access Control projects and offers the top 10 lessons for organizations that are thinking about implementing, are currently implementing, or have already implemented SAP Access Control. Examine:

y Little-known tips to ensure that the tech-nology works robustly, and how to use it to deliver the desired benefits and outcomes

y Proven techniques to better engage your organization — including senior spon-sors, business users, and all stakeholder groups — to ensure the available advan-tages materialize

y Common concerns regarding the man-agement of SAP Access Control once it is in operation and how your organization can overcome them

y Common pitfalls associated with an SAP Access Control project and how to avoid them

Case study

How The Coca-Cola Company reduced the time and effort spent on user access reviews with an automated role and security clean-up processKyleen Wissell, The Coca-Cola CompanyLearn how The Coca-Cola Company lever-aged SAP Access Control to streamline its user access review process and to maximize associ-ated return on investment (ROI). Learn how the company:

y Leverages data classification to drive an improved periodic access review process

y Implemented a 120-day inactivity rule that automated role cleanup and a 180-day inactivity rule that automated removal of system IDs for improving licensing management

y Uses HR triggers in SAP ERP HCM to auto-mate access reviews when users change jobs

Resolve access risk violations with a comprehensive task-based approachSujana Somasekar, SAPAttend this session for key steps in managing your SAP Access Control rule set and in prov-ing that your segregation of duties reports are accurate. You will:

y Hear best practices and key techniques for creating, reviewing, and maintaining your rule set

y Explore the predelivered rule set that comes with the risk analysis and remedia-tion tool and how you can use the rules delivered with it as a starting point for your own remediation rule set

y View practical examples that illustrate how to customize the standard rule set in your system to ensure that your segrega-tion of duties (SoD) testing is comprehensive

y Walk through a nine-step approach for validating your system configuration and exclusion criteria for accurate reporting and learn proven practices for reviewing and remediating access violations

Live demo

What’s new with SAP Access Control 10.1Erin Hughes, SAPAttend this product demo for an overview of the latest solution updates to SAP Access Control. Get a sneak peek at planned fea-ture enhancements, including updates to the access risk analysis and access request processes, usability updates, and more. See firsthand how to:

y Automatically detect and remediate access risk violations across SAP and non-SAP systems

y Embed compliance checks and manda-tory risk mitigation into business processes

How to conduct cross-application segregation of duties risk analysisPrateek Jain, EYThis session offers expert tips and techniques to address segregation of duties risks across SAP and non-SAP systems using SAP solutions for GRC 10.0. Attend this session to:

y Benefit from insights to enable discus-sions with the Business and IT personnel to identify the risks and develop a com-prehensive SoD cross-applications rule set

y Get tips for using data extraction instead of real-time agents to analyze cross-appli-cation SoD

y Learn about the challenges that come across when integrating different busi-ness applications to perform the cross-application SoD risk analysis and explore technical solutions available to implement the process

Take home requirements gathering templates to help identify potential business and IT risks.

SAPexperts LIVE Take advantage of the support for multiple rulesets in SAP Access Control 10.0 Kehinde Eseyin, Turnkey ConsultingDon’t miss this opportunity to personally meet Kehinde Eseyin (CISM, CISA), Senior SAP GRC Consultant at Turnkey Consulting. Engage in an in-depth discussion about one of his most widely read articles from the GRC hub of the SAPexperts knowledgebase — the leading publication and knowledgebase for orga-nizations that leverage SAP solutions for governance, risk, and compliance. Learn how to use a business rule to influence the rule-set that is automatically applied to an access request based on defined attributes. Get tips to build a Business Rule Framework plus (BRF+) logic to default a specific ruleset to an access request once defined criteria are satisfied You’ll receive a copy of the article — free of charge — and engage with peers who have the same interests and priorities.

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 17: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

17

Track 3: Access governance and segregations of duties

Configuring your system for optimal SoD analysis reporting, simulations, and mitigation controlsRuth Johnson, Customer Advisory GroupLearn the various options for creating accurate and up-to-date SoD risk analysis reports using the management graph reporting capabilities in SAP Access Control. This session examines:

y The capabilities of management graphs and how to utilize them for an up-to-date look at the SoD condition of your systems

y How to confirm the system is configured so that critical roles and profiles are not inadvertently picked up in your violations reports

y How to enable transaction usage report-ing to assist in the SoD remediation

y The top considerations you’ll want to account for when performing risk analysis reporting

Integrate SAP Access Control with identity management to enable enterprise-wide compliant user provisioning James Rice, Greenlight TechnologiesThis session provides best practices for lever-aging SAP Access Control as the risk and policy engine in order to provide preventative com-pliance checks prior to provisioning risky access across business applications. Examine why and how to integrate GRC into the iden-tity management lifecycle in order to enhance your existing access request process with pre-ventative segregation of duties risk analysis and compliant provisioning and learn how to:

y Enable policy checks during the access request and approval process

y Ensure compliant user access across SAP and enterprise applications

y Enable risk management as part of the periodic access certification process

y Apply mitigating controls to risky access when approved and granted

Hands-on lab

A practical guide to post-installation configuration of SAP Access ControlKurt Hollis and Narayanan Krishnamoorthy, DeloitteIn this hands-on session, gain practical instruc-tion to perform the first risk analysis, first emergency access, and first access request in a newly implemented SAP Access Control 10.1 system. An expert instructor guides you through key processes and tasks, such as:

y Speeding up the process of setting up your system while learning important configuration settings based on real cus-tomer project knowledge

y Reviewing the SAP solutions for GRC 10.1 technical overview and architecture

y Setting up and customizing your rule set

y Running scheduled jobs for synchroniza-tion and risk analysis

A comprehensive guide to emergency access provisioning and monitoring in SAP Access Control 10.1Dylan Hack, DeloitteExplore how to solve some of the toughest challenges you may encounter when utilizing SAP Access Control 10.1 functionality for emer-gency access management. By attending this session, you will:

y Walk through leading practices for config-uring workflows for your emergency access management log reviews

y Understand proven tactics for building your end-user emergency access roles

y See firsthand a sample emergency access management report and gain an under-standing of the associated log workflow configuration using SAP’s multi-stage, multi-path (MSMP) workflow

Take home documents that highlight spe-cific emergency access management features and options, as well as sample reports, work-flow configurations, and implementation methodologies.

Hands-on lab

An introduction to using key features in SAP Access Control 10.1Satyen Paneri and Greg Granger, SAPThis hands-on session provides step-by-step instruction to fully utilize the new key features in SAP Access Control 10.1.

y Walk through the key steps for running risk analysis in SAP Access Control

y Practice conducting a firefighting session and review a complete summary of the activities performed

y Step through methods for submitting and approving requests for user access in SAP Access Control

y Get a complete overview of available security and audit reports included with the SAP Access Control solution

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 18: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

18

Track 4

Setting up security authorizations in SAP Process ControlMarc Jackson, Turnkey ConsultingThe way in which security and authorizations operate in SAP Process Control is different than other SAP applications. This session provides a crash course in SAP Process Control security to ensure you are providing the right people with the right access at all times in your system. By attending, you will learn:

y The elements which make up the authori-zation concept in SAP Process Control and how they interact with each other

y The authorization concept within SAP Process Control, including related config-uration and master data elements, and how it interacts with reporting and workflow

y How your organization can put in place an authorizations strategy to optimize and secure your compliance processes

Case study

How IHS keeps critical financial processes compliant using SAP Process ControlDiane Davis, IHS Attend this session and learn how IHS achieves greater efficiency within its financial com-pliances processes. To maintain compliance with key US GAAP regulations, the company required a tool to automate the monitoring and tracking of numerous manual processes in SAP ERP. Learn why the company chose SAP Process Control to:

y Improve control monitoring capabilities

y Provide management confidence in the consistency of its financial statements

y Allow for review of financial process exceptions

y Provide a clearer, more transparent audit trail

Mitigate financial risks and automate the testing of financial controls using SAP Process ControlBrian Perrotto, PwCWhen thinking about financial risk and your company, it’s important to start with an inspection of the risks that are closest to your financial statements. If controls around man-ual journal entries, general ledger master data, and key financial configurations break down, then the whole system of financial controls can be jeopardized. In this session, explore strate-gies to:

y Prevent the most common risks present in the financial and general ledger accounting process within SAP

y Document controls which address finan-cial risk using one central repository, allowing for the standardization and test-ing automation of these controls

y Achieve the benefits of continuous con-trols monitoring (CCM), utilizing the standard workflows available in SAP Pro-cess Control

Case study

How Southern California Edison drives compliance efficiency with a more continuous control monitoring programEd Drenten, Southern California EdisonCompliance processes in heavily regulated industries can require repeated, tedious, and labor-intensive documentation and con-trol monitoring by management and control testing by audit. Join this session as South-ern California Edison (SCE) details its efforts to streamline compliance processes by leveraging the continuous control monitoring functional-ity in SAP solutions for GRC 10.0. Hear how the company:

y Translated the project team’s “wish list” into functional capabilities of the tool to create a newly revised control monitoring strategy

y Deployed business rules using SAP Pro-cess Control which were then applied to company data to identify potential data integrity issues

y Automated control testing to remove the need for duplicate testing, resulting in a significant reduction in audit time

Developing a sound strategy for continuous control monitoring with SAP Process Control 10.xAtul Sudhalkar, SAPMany companies are not sure how to get started with continuous control monitoring. Many even implement a monitoring prod-uct without first defining what they want to accomplish and exploring the best way to go about it. Attend this session to:

y Explore project approaches and tech-niques for getting the most value from continuous control monitoring and auto-mated testing using SAP Process Control

y Learn what different options and func-tionality for continuous control monitoring exist and how to select the right tool for the job among SAP GRC solutions

y Hear how other customers have success-fully employed a continuous control monitoring strategy and the key business benefits they have since realized

Continuous monitoring and process control

Track 4 continued on next page

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 19: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

19

Track 4: Continuous monitoring and process control

How to build organizational and process hierarchies in SAP Process Control 10.0Bill Smith, DeloitteThis session will explore the various strategies for designing organizational and process hier-archies in SAP Process Control 10.0. Discover how to:

y Effectively assess your organization’s reg-ulatory reporting requirements, including how to determine whether or not your organization’s current structure will meet future regulatory and reporting needs and next steps for both scenarios

y Determine the leading approach for hier-archy design based on requirements

y Determine the leading roll-out plan for your organizational and process hierar-chies, including the pros and cons of a phased rollout versus a full rollout

y Build your organizational and process hierarchies using an appropriate imple-mentation technique

Case study

How Babcock & Wilcox added automated control monitoring using SAP Process ControlJoel Banister, Babcock & Wilcox Learn how Babcock & Wilcox successfully deployed the automated control monitoring capabilities within SAP Process Control to ease the burden and time spent on audits for Sar-banes-Oxley compliance. Hear firsthand from the company:

y How it identified the controls that were eligible for automation

y Key considerations for designing, build-ing, and deploying automated business rules

y Dos and don’ts of applying various auto-mated business rules into the controls environment

y How it designed its data sources to encompass wide amounts of pertinent information (i.e., all fields in a table) so that they could be utilized in multiple business rules

Take home a detailed instruction guide to recreate the same automated controls that Babcock & Wilcox currently employs.

How to successfully use the business rule framework (BRF+) in SAP Process Control to assess system usage and improve system performanceTaylor Hassan, PwCLearn how to assess the business benefits of SAP Process Control against defined key performance indicators, using business rule framework (BRF+). During this session, you will:

y Get tips on how to establish a common set of metrics that support process con-trol technology, automated dashboard reporting, and can be used to systemati-cally assess SAP utilization

y Walk through examples of how process and control deviations have been identi-fied via system KPI monitoring and dashboard reporting

y Understand what key actions have been taken upon KPI analysis that have led to better standardization of business pro-cesses and improved process compliance

Take home example KPIs that have been devel-oped for monitoring via SAP Process Control.

SAP Process Control 10.1: Expert tips and new features that add value and ensure successJan Gardiner, SAP This session sheds light on new features avail-able in SAP Process Control 10.1 and provides examples of how to leverage them to maxi-mize ROI. This session, designed for those with some familiarity with SAP Process Control, explores:

y How to set up your own rules for control monitoring and shared reporting across multiple compliance initiatives

y Policy management and mobile applica-tions that allow you to communicate policies to your entire employee population

y Tips for using automation, offline forms, audit integration, and scheduling avail-able in SAP Process Control 10.1

Best practices for continuous control monitoring in SAP Process Control Atul Sudhalkar, SAPExplore the enhanced capabilities of the auto-mated monitoring framework in SAP Process Control 10.0 and tips, tricks, pitfalls, and les-sons learned from customer implementations. Learn how to:

y Use change log monitoring to reconstruct past settings of key configurations and master data settings

y Navigate the range of monitoring meth-ods available, with a discussion of the benefits and limitations of each

y Leverage BRF+ functionality to build pow-erful monitoring rules

Panel discussion

Customers share their successes and lessons learned from SAP Process Control and SAP Risk Management implementation projectsModerated by: Bruce McCuaig, SAP Panelists: Ed Drenten, Southern California Edison, Bill Kulich, Timken, Cathy Mathis, Kraft FoodsParticipate in this candid, moderated dis-cussion with SAP customers who will share detailed insight, best practices, and les-sons learned from their experiences so far with SAP Process Control and SAP Risk Man-agement. Hear firsthand from these leading organizations:

y How they add business value by success-fully managing their risks and risk responses

y Methods to measure the success of GRC efforts and to troubleshoot implementa-tion challenges

y What has and has not worked for other companies during pre-project business case development, project realization, and go-live phases

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Track 4 continued on next page

Page 20: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

20

Track 4: Continuous monitoring and process control

Live demo

What’s new with SAP Process Control Marie-Luise Wagener, SAPAttend this product demo for a firsthand look at the latest solution updates and functionality available in SAP Process Control. You will:

y Learn how to use this tool provide insights into the potential impact of increased risk levels and compliance violations

y Proactively analyze control failures and monitor remediation

Hands-on lab

A practical guide to using key features in SAP Process Control 10.1Jan Gardiner and Joao Paulo Fortes, SAPThis hands-on session guides you through an introduction to key processes you’ll need to know to get the most of your SAP Process Con-trol system. By attending, learn:

y How to leverage the standard delivered reports in SAP Process Control to identify control exceptions

y How to properly make changes to con-trols’ master data

y The most effective methods for perform-ing self-assessments and raising control issues

y How to leverage entry pages in SAP Pro-cess Control, new feature with version 10.1

Case study

Lessons learned from Kraft Foods’ recent SAP Process Control migration projectCathy Mathis, Kraft FoodsAttend this session and learn how Kraft has recently made the migration from its legacy Sarbanes-Oxley controls repository to a fully functional SAP Process Control 10.0 system with continuous monitoring capabilities. Hear firsthand as Kraft details:

y How it successfully transitioned from its previous control system to SAP Process Control 10.0

y What steps were taken to set up auto-mated rules at Kraft Foods, including the company’s method for utilizing rules for both master and transactional data moni-toring as well as configuration monitoring

y Its tactical roadmap along with suggested prioritization techniques and key lessons learned from the project

Take the next step in your GRC strategy: Building the business case for SAP Process Control and SAP Risk ManagementBruce Romney , SAPIf your organization has already implemented SAP Access Control, attend this session to learn what’s next when tasked with the responsibility of streamlining and better managing your gov-ernance, risk, and compliance (GRC) initiatives. Come away with a clear understanding of:

y Opportunities that exist to help enable your compliance and process optimiza-tion program through SAP Process Control

y How your organization can lower the cost of compliance management and related audit activities through centralization and automation strategies

y Methods to expand and improve risk cov-erage through more strategic allocation of resources and better visibility into risks using SAP Risk Management

y Strategies for building the business case for technology to automate your risk and compliance programs

A step-by-step guide to policy lifecycle management using SAP Process ControlVijan Patel, ProtivitiGiven today’s regulatory requirements, and the recent spread of reputational risk, a thor-ough policy management program is a must for companies of virtually any size. This session examines:

y The breadth of functionality included in the policy management portion of SAP Process Control

y A step-by-step example of how a policy is created in SAP Process Control and fol-lows the review, edit, and approval workflow

y An example of policy acknowledgement and the dashboards used to track progress

y How to create a custom policy quiz to enforce policy understanding by employees

y An overview of configuration and master data setup for policy management

Take home a demo on policy creation, edition, approval, communication, acknowledgement, and enforcement.

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 21: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

21

Track 5

How to identify, manage, and set up a more effective risk management framework Dr. Werner van Haelst, IntegrcAttend this session to gain a clear understand-ing of SAP Risk Management, explore its key capabilities, and learn how to use it to facilitate and automate enterprise risk management (ERM) processes. Discover how to:

y Implement proactive, collaborative ERM processes throughout your enterprise

y Leverage a best-practice framework for enterprise risk identification, collaborative risk analysis, risk-response management, and continuous risk monitoring and reporting

y Optimize your risk management pro-cesses by decreasing manual work and using automated workflows and SAP Interactive Forms by Adobe

Best practices for building a comprehensive risk management programBruce McCuaig, SAPAttend this session to explore key con-siderations in designing and building a comprehensive risk management program. Discover how to:

y Mitigate challenges of establishing a risk management environment that is crucial to achieve sustained performance

y Customize your industry-specific approach to risk management based on your organizational readiness, level and cadence of engagement, and collabora-tion techniques

y Launch and sustain a risk management practice while adhering to best practices and avoiding common pitfalls

y Take a value-based approach to imple-menting risk management initiatives and gain executive support

Creating the building blocks for effective risk management with SAP Risk Management 10.1Thomas Frénéhard, SAPSAP Risk Management solution provides an integrated approach to understand, priori-tize, and manage enterprise risks, delivering valuable data to support risk-based decision making. Attend this session to learn how:

y The solution supports several different control frameworks, like ISO31000 and COSO ERM

y To achieve accurate planning, risk identifi-cation and analysis, risk response, and monitoring in SAP Risk Management

y SAP Risk Management aligns with SAP HANA and SAP Mobile platforms

Panel discussion

Customers share their successes and lessons learned from SAP Process Control and SAP Risk Management implementation projectsModerated by: Bruce McCuaig, SAP Panelists: Ed Drenten, Southern California Edison, Bill Kulich, Timken, Cathy Mathis, Kraft FoodsParticipate in this candid, moderated dis-cussion with SAP customers who will share detailed insight, best practices, and les-sons learned from their experiences so far with SAP Process Control and SAP Risk Man-agement. Hear firsthand from these leading organizations:

y How they add business value by success-fully managing their risks and risk responses

y Methods to measure the success of GRC efforts and to troubleshoot implementa-tion challenges

y What has and has not worked for other companies during pre-project business case development, project realization, and go-live phases

Live demo

The latest features and functionality in SAP Risk Management Thomas Frénéhard, SAPAttend this product demo for a firsthand look at the latest solution updates and functional-ity available in SAP Risk Management. Learn how to:

y Track key risk indicators and align risk events while keeping their potential impact in mind

y Identify systemic risk drivers and their impact on value, processes, and performance

Take the next step in your GRC strategy: Building the business case for SAP Process Control and SAP Risk ManagementBruce Romney , SAPIf your organization has already implemented SAP Access Control, attend this session to learn what’s next when tasked with the responsibil-ity of streamlining and better managing your governance, risk, and compliance (GRC) initia-tives. Come away with a clear understanding of:

y Opportunities that exist to help enable your compliance and process optimiza-tion program through SAP Process Control

y How your organization can lower the cost of compliance management and related audit activities through centralization and automation strategies

y Methods to expand and improve risk cov-erage through more strategic allocation of resources and better visibility into risks using SAP Risk Management

y Strategies for building the business case for technology to automate your risk and compliance programs

Risk management

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 22: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

22

Track 6

Track 6 continued on next page

Panel discussion

The role of your auditor in a GRC deploymentModerated by: Steven Storm, IBM Panelists: Ben Zimmerman, EY; John Kowalski, KPMG; John Livingood, ProtivitiDon’t miss this unique opportunity to cap-ture the best of all the lessons learned, words of wisdom, and voices of experience regard-ing GRC deployments and the role of internal and external auditors. During this panel dis-cussion, leading authorities from the big four consulting firms answer your most challenging questions, such as:

y What is the auditor’s role in a GRC deployment?

y What input does the GRC team need from the auditors prior to project planning and go-live?

y What output should the GRC team be cre-ating for the auditors?

y Should internal audit be a part of the GRC design?

y Should internal audit own the GRC rule set?

Walk away from this session with dozens of best-practice ideas that you can put to imme-diate use during your own GRC deployment.

Case study

How Tyson Foods refreshed SoD rules while upgrading to SAP Access Control 10.0Andrea Wallace and Patrick Snodgrass, Tyson FoodsAttend this session and listen in as Tyson Foods details its recent upgrade project from Virsa 4.0 to SAP Access Control 10.0. During this session, hear how the company:

y Completed a project to update and refresh its segregation of duties frame-work and rule set as part of its upgrade

y Implemented additional process and con-trols to ensure its GRC rule set is kept up to date on an ongoing basis

y Properly engaged business process own-ers in the GRC rule set development process in order to arrive at a customized SoD rule set which was most relevant for the organization

I’ve implemented SAP solutions for GRC; now what? Tips and tricks for maintaining GRC initiatives long after the consultants leaveMick McGarry, KPMGYou’ve implemented SAP solutions for GRC, the initial excitement has worn off, and you now need to sustain and continually derive value from your system for years to come. By reviewing a recent KPMG survey of about 100 global organizations and KPMG’s experiences with supporting organizations, you will be able to:

y Develop a post-go-live ownership model for GRC by examining responsible, accountable, consulted, and informed (RACI) models

y Benchmark your company against similar companies using SAP solutions for GRC so that you will be able to overcome com-mon sustainment challenges

y Understand how organizations have over-come common challenges with tips and tricks compiled from the survey customer projects

Case study

Lessons learned from Nike’s SAP Access Control 10.0 in-house migration projectEric Dwyer, NikeMoving from SAP Access Control 5.3 to SAP Access Control 10.0 can be a daunting task. Learn how Nike took the path less traveled by making the decision to take on the upgrade in-house without a dedicated external consulting team. Listen in as Nike shares:

y Experiences, lessons learned, and key takeaways from all aspects of the project, including inception, making a business case, planning, communications, installa-tion, and configuration

y The type of data migration and workflow re-creation strategy that was used within the new application in order to ensure problems from the 5.3 version were no longer issues

y How the company migrated role data from its 5.3 system into 10.0, including custom attributes

Case study

Lessons from a ramp-up customer: How Sharp Electronics completed an SAP GRC 10.1 upgrade Wyatt MacManus and Ralph Russo, Sharp ElectronicsIn this session, you will hear about Sharp Electronics’ experience as an SAP customer validation partner assessing SAP solutions for GRC 10.1, including SAP Access Control and SAP Process Control, prior to its ramp-up release. By attending this session, receive:

y Information on the ramp-up process and the experiences that Sharp underwent when upgrading its SAP solutions for GRC 10.0 to the newest release, version 10.1

y Key tips for building a business case to upgrade or implement SAP solutions for GRC 10.1

y Insights into the features Sharp Electron-ics is utilizing from this release, including the organization rule builder and updated Corbu-themed user interface

Implementing, upgrading, and integrating GRC solutions

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 23: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

23

Track 6: Implementing, upgrading, and integrating GRC solutions

A technical primer: Step-by-step guidelines for upgrading your GRC solutions Ankur Baishya, SAP LabsAttend this unique session and get technical guidance from an experienced expert on SAP solutions for GRC 10.1 implementations and upgrades. Examine how to:

y Prepare your system landscape and archi-tecture for the upgrade

y Arm yourself with a detailed understand-ing of the key success factors and best practices for an implementation or upgrade

y Execute the upgrade with a proven step-by-step process for migrating from previous releases

y Customize the user interface and leverage other available standard SAP tools

y Overcome and avoid common potential technical pitfalls by learning from success-ful customer approaches

Tips and tricks for administering your GRC systemsPrem Balraj, SAPAttend this session and meet directly with one of SAP’s Senior GRC Support Engineers and learn tips and tricks for administering SAP Access Control. By attending this session, you will:

y Hear recommendations for performance tuning and sizing your 10.x system

y Learn how to quickly identify the root cause of problems and find existing solu-tions using SAP’s new automated note search tool

y Get answers to frequently asked support questions and hear suggestions for log-ging messages in the SAP Service Marketplace

y Get an overview of support tools avail-able to SAP customers and how they apply to different GRC applications

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 24: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

24

An up-to-date guide to reporting and analytics options for SAP solutions for GRCSujana Somasekar, SAPExamine the many reporting options available to view and analyze the information you man-age, monitor, and record with the latest release of SAP solutions for GRC. During this session, you will:

y Learn how to integrate the reporting capabilities of SAP solutions for GRC 10.1 with SAP NetWeaver BW and SAP Busines-sObjects Business Intelligence (BI) solutions

y Examine what options exist to customize reports for mobile devices using GRC with SAP BusinessObjects Mobile 4.0

y Walk through a demonstration of analyti-cal scenarios, showing data integration and aggregation, data quality checks, and both tactical reports and management-level analytics

Integrating GRC with SAP BusinessObjects BI: Practical advice for enhancing and customizing your GRC reportsJose Espin, EYLearn how to integrate SAP solutions for GRC 10.0 with SAP BusinessObjects Business Intel-ligence (BI) to better fulfill your compliance reporting requirements. This session walks you through:

y Developing the business case to integrate GRC and BI activities to provide organiza-tions with a holistic view of governance, risk, and compliance

y Real examples of dashboards and reports that can be used to provide executives, managers, and analysts with key GRC information and enable continuous con-trol monitoring

y Key points for a successful GRC and BI integration, such as SAP business content, requirements definition, dashboard design, and data modeling

Take home dashboard samples developed using SAP BusinessObjects dashboards and the actual data sources that were used to build them.

Successful fraud analytics: Tips for mining SAP data based on common fraud scenariosSteve Biskie, High Water AdvisorsEvery organization will be hit by fraud at some point, but many may never know where, when, or how. In this session, review specific exam-ples of analytics that can be run against data within SAP systems to identify the red flags of fraud and examine:

y Common areas where fraud is likely to occur both inside and outside of the organization

y What tools built into the standard SAP ERP system (such as SAP query) can be used to spot potential fraud, as well as how new applications like SAP Fraud Management can be used to not only detect, but also prevent, ongoing fraud

y 10 specific, actionable tips that can enhance fraud data mining processes and reduce the number of false-positives

Configuring your system for optimal SoD analysis reporting, simulations, and mitigation controlsRuth Johnson, Customer Advisory GroupLearn the various options for creating accurate and up-to-date SoD risk analysis reports using the management graph reporting capabilities in SAP Access Control. This session examines:

y The capabilities of management graphs and how to utilize them for an up-to-date look at the SoD condition of your systems

y How to confirm the system is configured so that critical roles and profiles are not inadvertently picked up in your violations reports

y How to enable transaction usage report-ing to assist in the SoD remediation

y The top considerations you’ll want to account for when performing risk analysis reporting

Case study

How American Water utilizes GRC reports and SAP BusinessObjects BI to reduce auditing expensesCharlie Singh, American WaterExplore a firsthand account of how America Water leverages key GRC reports, emergency access management analytics, and Xcelsius dashboards to streamline the company’s entire audit process. Listen in as American Water details:

y The 10 most important t-codes that had to be monitored for its financial and Sar-banes-Oxley audit

y How it evaluated role usage and emer-gency access analytics using the identity analytics tool and Xcelsius dashboards

y The company’s method for efficiently and effectively removing orphaned roles to reduce maintenance and audit costs

y Lessons learned during the building of the SAP- and non-SAP-specific rule set engine

Take home sample Xcelsius reports used by American Water.

Track 7

GRC reporting and analysis

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 25: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

25

Track 8

How to keep your SAP audit approach up to date with the latest audit trends and global challengesScott Conner, KPMGWith new regulations being passed on a con-tinual basis, paired with the challenge of more and more organizations operating on a global level, it’s important that your audit approach reflects the changing times. Attend this ses-sion to learn:

y What audit considerations need to be accounted for when operating in an out-sourced, shared service, or cloud environment

y Leading tips for evolving your organiza-tional structure so that it meets the growing audit needs of your organization

y How to employ data analytics to increase the efficiency of your audit

Examine how PCAOB’s proposed new auditing standards will impact your organization Marsha Reppy, EYAttend this session for detailed insight into the newly proposed auditing standards from the Public Company Accounting Oversight Board (PCAOB) and learn what effect this will have on auditing practices within your organization. During this session:

y Walk through the key proposed changes to the audit standards and understand the impact this may have on manage-ment’s assessment of internal control over financial reporting (ICFR) as well as internal and external audit activities

y Discuss key ICFR areas requiring attention and relevant examples

y Learn about the impact of the updated standards on audit communications, fostering more constructive dialogue between the auditor and the audit committee

Tips and tricks to a painless financial reporting auditSteve Biskie, High Water AdvisorsThis session provides insight to help project managers, implementation teams, adminis-trators, and users better prepare for a financial reporting audit of their SAP system. You will learn:

y How a financial reporting audit done by an external audit firm may differ from that of your internal audit department and why this is important

y What reports should be reviewed consis-tently, such as those covering general ledger master data changes, recurring entry changes, asset posting anomalies, and accounting data inconsistencies

y Tips for engaging your internal and exter-nal auditor early in the process to avoid surprises

Taking a top-down, risk-based approach to SAP auditsShola Oguntunde, EYThis session offers expert tips to improve your SAP IT controls testing and better prepare you for your next SAP audits. By attending, you will:

y Gain a solid understanding of the controls lifecycle and audit process in SAP

y Get tips for defining your risks and key controls based on a top-down, risk-based approach, enabling the auditor to focus on issues that may affect the scope and testing strategy early in the process

y Get recommendations for testing your controls and interpreting the results

y Review potential audit or common test-ing mistakes and learn how to avoid them

Glean greater value from your SAP audits: It’s not just about complianceJonathan Levitt, PwC Many organizations’ sole focus is to ensure that there are no issues when the auditors make their annual appearance to assess access rights — some to the extent where controls and pro-cesses are implemented to merely satisfy the audit and to achieve compliance requirements. Attend this session to:

y Gain tips and tricks to better manage the audit process and achieve more value add from your auditors

y Learn how controls can help achieve operational benefits and enhance pro-cesses rather than just maintain compliance with mandated regulations

y Walk through real-world examples which illustrate the effective implementation of controls that not only leverage existing access processes and tools such as SAP Access Control, but also meet audit requirements and protect the organiza-tion from risk

Audits and assurance

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Track 8 continued on next page

Page 26: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

26

Live demoSpeed up audit processing with SAP Audit Management James Chiu, SAP LabsAttend this live demo and see firsthand how you can manage resources, schedules, tasks, and remediation activities for internal audit programs using SAP Audit Management. See firsthand:

y How to create, process, and manage audit plans

y How to integrate auditing activities across multiple applications for different business requirements

y What new enhancements are available for internal audit risk management as part of SAP GRC 10.1

Reduce auditing expenses and improve the efficiency of your GRC landscape using SAP Audit ManagementJochen Thierer, SAPAttend this session and learn how SAP’s new audit management tool provides support for the end-to-end audit cycle. Get recommenda-tions and strategies to:

y Enable the assessments of risk for pur-poses of audit planning to ensure audits are aligned with business risks and objectives

y Provide your organization with reusable audit template libraries and ensure the optimized utilization of resources and past audit work

y Improve audit coverage and perfor-mance with audit analytics capabilities in GRC

y Streamline communication with execu-tive management and the audit committee

Track 8: Audits and assurance

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 27: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

27

Track 9

Where are you now and where do you want to be on the roadmap of compliance?James Roeske, Customer Advisory GroupThis session highlights and explains the many steps companies must take to stay on the right path to compliance, such as ensuring efficient security and GRC technologies, staying one step ahead of fraudsters, and satisfying the requirements of auditors. Explore:

y The typical journey and evolutionary path a GRC customer goes through during the lifecycle of becoming and staying compliant

y Specific SAP solutions for GRC 10.0 func-tionality that will allow you to achieve short- and long-term compliance goals

y Real-world insight based on 160+ GRC customer implementations, including key tips to enhance ROI and boost levels of success at different stages of the GRC path

Panel discussion

How companies leverage SAP solutions for GRC to safeguard assets, prevent fraud, and comply with complex regulationsModerated by: David Cargile, KPMG Panelists: Mark Feiner, Tyson Foods, Danielle Bass, Citrix, Beth Longest, MeadWestvaco, Kent Cowsert, KPMGAttend this lively discussion to hear ideas, experiences, and perceptions — from panel members representing various business functions — regarding opportunities compa-nies can leverage to benefit from SAP solutions for GRC. Discussion will focus on:

y Strategic and tactical decisions and align-ment required for leading-class SAP solutions for GRC implementations and initiatives

y Change management tactics and tips to close the gap between diverse business units post-rollout to maximize ROI on GRC technologies

y How to use strategic enablers and tools successfully during and after a GRC technology implementation

How to keep your SAP audit approach up to date with the latest audit trends and global challengesScott Conner, KPMGWith new regulations being passed on a con-tinual basis, paired with the challenge of more and more organizations operating on a global level, it’s important that your audit approach reflects the changing times. Attend this ses-sion to learn:

y What audit considerations need to be accounted for when operating in an out-sourced, shared service, or cloud environment

y Leading tips for evolving your organiza-tional structure so that it meets the growing audit needs of your organization

y How to employ data analytics to increase the efficiency of your audit

GRC beyond financial compliance: Managing multiple compliance initiatives with the SAP solutions for GRCBruce Romney, SAP Learn how SAP solutions for GRC are evolv-ing to provide compliance professionals a platform to manage multiple compliance ini-tiatives. This session will illustrate:

y How SAP solutions for GRC help prepare and protect customers against expensive and damaging bribery and corruption incidents

y What steps you can take to transform your organization’s approach from a man-ual and reactive to an automated and proactive approach

y How to manage multiple compliance ini-tiatives in industries such as Life Sciences, Utilities, and Oil & Gas

Case study

How IHS keeps critical financial processes compliant using SAP Process ControlDiane Davis, IHS Attend this session and learn how IHS achieves greater efficiency within its financial com-pliances processes. To maintain compliance with key US GAAP regulations, the company required a tool to automate the monitoring and tracking of numerous manual processes in SAP ERP. Learn why the company chose SAP Process Control to:

y Improve control monitoring capabilities

y Provide management confidence in the consistency of its financial statements

y Allow for review of financial process exceptions

y Provide a clearer, more transparent audit trail

GRC for finance teams

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Track 9 continued on next page

Page 28: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

28

Track 9: GRC for finance teams

Mitigate financial risks and automate the testing of financial controls using SAP Process ControlBrian Perrotto, PwCWhen thinking about financial risk and your company, it’s important to start with an inspection of the risks that are closest to your financial statements. If controls around man-ual journal entries, general ledger master data, and key financial configurations break down, then the whole system of financial controls can be jeopardized. In this session, explore strate-gies to:

y Prevent the most common risks present in the financial and general ledger accounting process within SAP

y Document controls which address finan-cial risk using one central repository, allowing for the standardization and test-ing automation of these controls

y Achieve the benefits of continuous con-trols monitoring (CCM), utilizing the standard workflows available in SAP Pro-cess Control

Creating controls to monitor purchasing and accounts payable processes in SAPGordon Roland, PwCInternal mistakes, fraud, and vendor inconsis-tencies all can wreak havoc on your accounts payable and purchasing activities. Understand how to implement both standard ERP and SAP GRC functionality to solve these common problems within the purchase-to-payables process. Attend this session and learn:

y What different options exist in SAP ERP standard configuration, SAP Process Con-trol, and SAP Fraud Management to help combat these areas of financial loss

y The key steps you’ll need to take to imple-ment each and how they can be integrated to build a well-rounded effi-cient improper payment mitigation program

y Critical success factors from real-world projects implemented to combat these issues and the ROI that has since been achieved

Enhance your financial processes with SAP solutions for GRCStephanie Gruber, SAP LabsFinance professionals continue to be under pressure to not only manage ever-changing regulatory requirements, but also to do so with fewer and fewer resources. This session will illustrate:

y How SAP solutions for GRC can help you do more with less by monitoring end-to-end business processes and alerting you to high risk areas and control exceptions — as well as suspicious activity

y What steps you can take to transform your organization’s approach from a man-ual and reactive to an automated and proactive approach

y How to gain timely insights into key areas of risk within financial processes and tech-niques for process improvement and corrective actions

Tips and tricks to a painless financial reporting auditSteve Biskie, High Water AdvisorsThis session provides insight to help project managers, implementation teams, adminis-trators, and users better prepare for a financial reporting audit of their SAP system. You will learn:

y How a financial reporting audit done by an external audit firm may differ from that of your internal audit department and why this is important

y What reports should be reviewed consis-tently, such as those covering general ledger master data changes, recurring entry changes, asset posting anomalies, and accounting data inconsistencies

y Tips for engaging your internal and exter-nal auditor early in the process to avoid surprises

Integrating GRC with SAP BusinessObjects BI: Practical advice for enhancing and customizing your GRC reportsJose Espin, EYLearn how to integrate SAP solutions for GRC 10.0 with SAP BusinessObjects Business Intel-ligence (BI) to better fulfill your compliance reporting requirements. This session walks you through:

y Developing the business case to integrate GRC and BI activities to provide organiza-tions with a holistic view of governance, risk, and compliance

y Real examples of dashboards and reports that can be used to provide executives, managers, and analysts with key GRC information and enable continuous con-trol monitoring

y Key points for a successful GRC and BI integration, such as SAP business content, requirements definition, dashboard design, and data modeling

Take home dashboard samples developed using SAP BusinessObjects dashboards and the actual data sources that were used to build them.

Glean greater value from your SAP audits: It’s not just about complianceJonathan Levitt, PwC Many organizations’ sole focus is to ensure that there are no issues when the auditors make their annual appearance to assess access rights — some to the extent where controls and pro-cesses are implemented to merely satisfy the audit and to achieve compliance requirements. Attend this session to:

y Gain tips and tricks to better manage the audit process and achieve more value add from your auditors

y Learn how controls can help achieve operational benefits and enhance pro-cesses rather than just maintain compliance with mandated regulations

y Walk through real-world examples which illustrate the effective implementation of controls that not only leverage existing access processes and tools such as SAP Access Control, but also meet audit requirements and protect the organiza-tion from risk

Track 9 continued on next page

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 29: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

29

Track 9: GRC for finance teams

Case study

How American Water utilizes GRC reports and SAP BusinessObjects BI to reduce auditing expensesCharlie Singh, American WaterExplore a firsthand account of how America Water leverages key GRC reports, emergency access management analytics, and Xcelsius dashboards to streamline the company’s entire audit process. Listen in as American Water details:

y The 10 most important t-codes that had to be monitored for its financial and Sar-banes-Oxley audit

y How it evaluated role usage and emer-gency access analytics using the identity analytics tool and Xcelsius dashboards

y The company’s method for efficiently and effectively removing orphaned roles to reduce maintenance and audit costs

y Lessons learned during the building of the SAP- and non-SAP-specific rule set engine

Take home sample Xcelsius reports used by American Water.

Best practices for building a comprehensive risk management programBruce McCuaig, SAPAttend this session to explore key con-siderations in designing and building a comprehensive risk management program. Discover how to:

y Mitigate challenges of establishing a risk management environment that is crucial to achieve sustained performance

y Customize your industry-specific approach to risk management based on your organizational readiness, level and cadence of engagement, and collabora-tion techniques

y Launch and sustain a risk management practice while adhering to best practices and avoiding common pitfalls

y Take a value-based approach to imple-menting risk management initiatives and gain executive support

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 30: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

30

Effective methods for maintaining compliance with Foreign Corrupt Practices Act (FCPA)Roberta Wang, PwCOver the past few years, there has been a sig-nificant increase in attention to compliance with the Foreign Corrupt Practices Act (FCPA) and Anti-Bribery and Corruption Act (ABC). Compliance is difficult to achieve in a cost-effi-cient manner. Attend this session to:

y Develop a deeper understanding of the FCPA and the penalties that are associ-ated with breaching it

y Learn how to leverage SAP GRC to sup-port FCPA compliance

y Get tips to reduce your FCPA compliance efforts

y Put into place an effective FCPA program to help adhere to ethical business prac-tices through better detection and prevention

Leading practices for preparing FERC-compliant reportsDavid Cohen, EYThis session will review several options in SAP which can be used to comply with FERC finan-cial reporting requirements.

y Find out why FERC financial reporting requirements remain a challenge to cus-tomers as they often involve a more complex legal structure

y Walk through the initial and basic SAP ECC solution offered as part of IS-Utilities (US) module and learn how reports can be generated using SAP’s special ledger and month-end allocations

y See what capabilities exist for integrating SAP Business Planning and Consolidation with the SAP General Ledger to more effi-ciently monitor and improve reporting results that are focused on operations

y Examine the recent SAP enhancement package and how it allows for the capture of cost for service and maintenance at an operations level, eliminating the need for custom fields

Aligning GRC with the revised COSO Internal Control-Integrated FrameworkChristal Metz, EY The COSO Internal Control-Integrated Frame-work is a standard for internal controls that many organizations have successfully adopted and created internal control policies, pro-cedures, and activities around. Attend this session to:

y Understand the latest developments with the COSO Internal Control-Integrated Framework

y Prepare for change by developing a deeper understanding of the framework gaps that need to be addressed

y Walk through strategic steps for aligning your internal control structure to the new framework

y Obtain instruction and learn how imple-menting SAP solutions for GRC provides the opportunity to improve alignment to this framework and strengthen your asso-ciated internal control components

Examine how PCAOB’s proposed new auditing standards will impact your organization Marsha Reppy, EYAttend this session for detailed insight into the newly proposed auditing standards from the Public Company Accounting Oversight Board (PCAOB) and learn what effect this will have on auditing practices within your organization. During this session:

y Walk through the key proposed changes to the audit standards and understand the impact this may have on manage-ment’s assessment of internal control over financial reporting (ICFR) as well as internal and external audit activities

y Discuss key ICFR areas requiring attention and relevant examples

y Learn about the impact of the updated standards on audit communications, fostering more constructive dialogue between the auditor and the audit committee

Case study

How The Dow Chemical Company transformed SAP global finance operations with centralized tax managementDennis Strahl, The Dow Chemical CompanyThe Dow Chemical Company needed a new way to increase finance, IT, and tax depart-ment resource efficiency, while also reducing financial accounting discrepancies and gain-ing greater control over its global value-added tax and U.S. sales and use taxes. Learn how the company successfully centralized its tax man-agement processes and:

y Find out how it optimized its approach to global finance transformation by simplify-ing the way it determines, calculates, and reports its transaction tax implications

y Learn how the organization successfully facilitates the calculation of tax in chal-lenging regions and multi-level jurisdictions

y Get tips for implementing a global indi-rect tax methodology to ensure that financial applications are delivering pay-ment accuracy and meeting compliance requirements

Track 10

Track 10 continued on next page

Legal and regulatory updates

Governance, Risk & ComplianceGRC2014

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 31: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

31

Critical tax implications to account for during your SAP implementationMike Sieradski and Tracy Davis, KPMG When rolling out SAP, it’s imperative that com-panies integrate tax into the entire lifecycle to maximize the efficiency of downstream tax processes. Virtually every business transac-tion has tax implications, so it is very important dedicated tax resources be assigned to the implementation team to proactively integrate these tax data requirements into the design of SAP. By attending, you learn:

y When and how to best involve the tax department in an implementation project

y How to maximize the vast capabilities of SAP in order to handle complexities of U.S. tax issues

y Key tax considerations, potential tax value drivers, and an outline of a typical tax implementation approach

Take home leading practices and a sample pro-cess for accumulating tax requirements and translating those into SAP solutions.

Doing business in Latin America? Key regulations and everything you’ll need to know to stay compliantSteve Sprague, Invoiceware InternationalElectronic invoicing and tax policies continue to change in Latin America. Both Brazil’s SEFAZ regulations (Nota fiscal) and Mexico’s SAT have launched new legislation for 2013 that includes changes to customer and supplier invoicing. During this session you will:

y Learn the latest mandates to help simplify your day to day management of Latin America e-invoicing

y Walk through the three primary classifica-tions of Brazil’s e-invoicing mandates including Nota Fiscal, Brazil Electronic Invoice for Services (NFE-s), and Brazil Transportation Document (CT-e)

y Learn how to avoid the risk of non-com-pliance, which places your organization at risk for customer collection issues, delayed shipments, large fines, and crimi-nal penalties as it is considered a form of tax evasion

Managing emerging accounting standards for revenue recognition and leasingPete Graham, SAPMajor accounting standards, be it IFRS or US GAAP, are constantly evolving, driven by fac-tors such as convergence of global accounting standards and the demand for even greater transparency. Attend this session and learn:

y Where the US is in terms of potential adoption, convergence, or co-endorse-ment of IFRS, and potential considerations for your SAP financial system

y Key changes to accounting standards which have recently been introduced or proposed, such as those surrounding rev-enue recognition and leasing

y How SAP has or is planning to address key proposed changes

Foreign currency valuation and translation dos and don’ts for better FAS 52 complianceRohana Gunawardena, Quality Systems & SoftwareObtain lessons to help alleviate concerns asso-ciated with FAS 52 compliance for foreign currency translation and valuation. This session will examine:

y Differences that exist between valuation (FAGL_FC_VAL) and translation (FAGL_FC_TRANS) in the SAP General Ledger and how to perform each

y Key areas to be aware of in the configura-tion when using these reports, including financial statement versions, account determination, and accounting principles

y Various valuation methods and criteria to determine which option should be selected based on your organization’s accounting principle and ledgers

Track 10: Legal and regulatory updates

For more information and to register, visit www.grc2014.com or call SAPinsider at +1-781-751-8700

Page 32: March 18–21 • Orlandowpc.0b0c.edgecastcdn.net/000B0C/ems_rep/downloads/... · A technical guide to setting up workflows, SAP Smart Business forms, and SAP Fiori Fact Sheets in

Send your teamBring a team and you can divide and conquer all of your learning objectives. Call Tim Belliveau at +1-781-751-8621 to learn how your organization can take advantage of exclusive group rates.

Orlando March 18-21

Walt Disney World® Swan and Dolphin

1500 Epcot Resorts Blvd.Lake Buena Vista, FL 32830

+1-(800) 227-1500

Governance, Risk & ComplianceGRC2014

M a r c h 18 – 21 • O r l a n d oMarch 18–21 • Orlando

Produced by Wellesley Information Services, LLC, publisher of SAPinsider. ©2014 Wellesley Information Services. All rights reserved.

SAP, R/3, ABAP, BAPI, SAP NetWeaver, Duet, PartnerEdge, ByDesign, SAP BusinessObjects Explorer, StreamWork, SAP HANA, the Business Objects logo, BusinessObjects, Crystal Reports, Crystal Decisions, Web Intelligence, Xcelsius, Sybase, Adaptive Server, Adaptive Server Enterprise, iAnywhere, Sybase 365, SQL Anywhere, Crossgate, B2B 360° and B2B 360° Services, m@gic EDDY, Ariba, the Ariba logo, Quadrem, b-process, Ariba Discovery, SuccessFactors, Execution is the Difference, BizX Mobile Touchbase, It’s time to love work again, SuccessFactors Jam and BadAss SaaS, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany or an SAP affiliate company. All other product and service names mentioned are the trademarks of their respective companies.

Register before March 16, 2014 and SAVE up to $200 www.GRC2014.com

Conference ratesConference

+ Pre-conference Workshops

March 17-21, 2014

Conference OnlyMarch 18-21, 2014

Pre-conference Workshops Sessions

OnlyMarch 17, 2014

Pay by March 16, 2014SAVE up to $200 $2,499 $2,199 $899

Pay On-site $2,699 $2,299 $899

SAVE up to $200/person

EARLY BIRD DISCOUNT*

*Register and pay by March 16, 2014 to