Difference between ARIS GRC and SAP GRC

design time vs run time

The process-driven ARIS Solution for Governance, Risk, and Compliance Management enables flexible introduction and efficient operation of an enterprise-wide risk and compliance management system. Companies benefit in particular from reusability of process documentation and the proven internal control system.

Using ARIS Business Architect for integrated documentation of all relevant BPM and GRC master data (like processes, risks, controls, responsibilities, entities, and software systems), the solution offers all advantages like reporting, graphical visualization, navigation and publication well known from design tools of ARIS Platform. ARIS Business Simulator allows analysing business processes in regard of possible damage coming from risks within these processes and allows evaluating the impact of controls.

In addition to this, ARIS Risk and Compliance Manager offers operational workflows for control testing, quantitative and qualitative risk assessments, loss and incident documentation, survey management and questionnaires. Escalation mechanisms initiate workflows for issue management or deficiency management.

Thus, ARIS Solution for GRC does not stop at the design time, but offers also a set of building blocks to help you wih different requirements in the areas of risk management or internal control systems.

Flexible reporting with ARIS MashZone allows creating dashboards giving the management relevant information about status of the internal control system.

For more information visit our GRC Lounge or our website.

Thank you very much for your information