SAP GRC Access Control is a suite of capabilities that monitor, test, and enforce access and authorization controls across the enterprise. SAP GRC Access Control helps companies to comply with regulatory mandates such as Sarbanes-Oxley. Organizations can readily identify and remove access and authorization risks from IT systems, as well as embed preventive controls in business processes to stop segregation of duties (SoD) violations. Companies benefit from considerable reduction in the time, risk, and cost associated with compliance. The bottom line results include improved performance, simplified risk and security administration, and fewer regulatory compliance issues.

SAP GRC Access Control includes the following capabilities: