Corporate boards are strategically pursuing risk management progress while integrating risk and internal control with more traditional performance measurements and rewards. This emphasis has put even more pressure on organizations to effectively manage change while leveraging technology to deliver control.
The implementation or significant upgrade of an SAP system is accompanied by significant organizational, process, and technological changes, each of which introduces a number of risks and challenges to be managed or mitigated. An SAP implementation or upgrade is often a large, complex project, with high visibility and high stakes for the organization. While management of these organizations generally recognizes the importance of internal control to the success of their organization, there is a broad array of approaches taken to incorporate this focus on risk and internal control into the implementation or upgrade effort.
To better understand organizations’ awareness and how they are managing these issues, PwC conducted an SAP controls study. The survey focused on how risk and controls aspects are integrated into the project effort, identified impacts of the project, usage of GRC technology, and lessons learned.