Home - Smart GRC

Stop the redundant rights in your company! smartGRC — all risks in permissions, under control.

Safe binzes and risks under strict control? - it's possible!
smartGrc - an indispensable system in your company.
Manage permissions, reduce risk, optimize processes, be smart!

smartAccess

Controled excessive system access for consultants and system administrators

The smartAccess application allows administrators and consultants to access a excessive range of autorization and permissions in the SAP system under special circumstances (emergency, business request, modification), while controlling the risk to the organisation posed by this excessive access. The built-in control mechanisms allow to smoothly pass any AUDIT of the SAP system, and enable to perform any necessary maintenance work in the system.

Gallery
Info
Demo

smartWorkflow

Authorisation access risks under your control
Access free from segregation of duties risks

The smartWorkflow application provides full flexibility of workflow configuration in the processes of rights management. The built-in segregation of duties risk matrix allows for a pre-emptive “what if” analysis at the stage of submission and approval of authorisation requests. The system automatically assigns rights in end systems, and the friendly workflow monitors the process and sends email notifications to its participants.

Gallery
Info
Demo

smartSod

Risk repository
SoD matrix and sensitive
access

smartSoD is a template access risk repository for segregation of duties risks and sensitive technical access. The library has been developed during security projects delivered for over 12 years for more than 100 customers from various industry and sectors (telecommunication, FMCG, retail, entertainment, production, chemistry, pharma). It works as project accelerator when user access reorganization is required and first project effect are required to be delivered fast. It contains a list of over 125 segregation of duties risks and 50 instances of sensitive access. The application allows to manage the standard content and to introduce modifications from non-standard transactions.

Gallery Info
Demo

smartReport

Control of redundant access
and SoD risks
for IT and business users

The smartReport application is an efficient and cost-effective tool for the identification and subsequent elimination of redundant permissions and segregation of duties risks in user access rights. An engine that enables the verification of user rights in terms of access to transactions sensitive from the business and IT perspective. A report system that facilitates work from the business perspective (what the risk is), as well as the technical perspective (how to modify system authorization and technical access rights).

Gallery
Info
Demo

smartReview

Intelligent risk review
Periodic verification of the state of permissions

The smartReview application allows for an intelligent review of user access and authorisations in various IT systems (SAP ERP, S/4 HANA, HCM, Active Directory, Teradata, Oracle, Billing, Spectrum, IFRS). The main focus in on segregation of duties risks that exists in users system access. The application documents a history of decisions made, and monitors the changes of user access in connected end- systems. It supports the review process by informing the decision-maker which instances of access were used often or rarely.

Gallery
Info
Demo

12 years on the market

17 implementations

3 language versions

A cadre of 15 experts

Base of more than 100 risks

6 modules

smartGRC – which form is the best?

3 basic possibilities

Off-line analysis of results
off-line

When is it most useful?

Urgent need to obtain information about the status of authorizations in the SAP system

Diagnosis of the authorization status without installing the ‘next’ system

Limited budget

No own infrastructure

Benefits

Shorter time to get results

No installation required

Less one-time cost

Installation
on premise

When is it most useful?

Frequent risk analysis of surplus allowances

Support of the certification
process

Wide Access Monitoring

Required periodic reviews

Benefits

Improved return on investment

Lower costs in the long term

Independence from supplier

Cloud
(AWS, Azure, GCP)

When is it most useful?

Lack of installation or infrastructure

No IT resources for database and web server management

Ad hoc application needs

Costs are less important

Benefits

Use if you need

GRC as a SaaS service

Short installation time

WHY SMARTGRC?

Our knowledge and experience from SAP security projects is embedded in the DNA of the smartGRC application.

We have been auditing and advising clients in the area of SAP Security & Authorization for more than 12 years. Any good idea to solve a problem in these areas is automatically converted into a new functionality of the smartGRC product. Continuous work on projects with various GRC class solutions means that we understand their advantages and weaknesses, which we use effectively for the development of smartGRC.

CASE STUDY

The GRC team focuses on role safety and authorization projects.

Learn more about our projects and their implementations.

FMCG industry

Industry: FMCG
Number of SAP users: 100-500
Country: Poland

Chemical industry

Industry: chemical
Number of SAP users: 1700
Country: Poland

Media and Communication industry

Industry: Media and Communication/li>
Number of SAP users: 1500
Country: Poland

Support in the management of entitlements free from segregation of duties risks (SoD).

Choose a support area that meets your current needs:

Get the help of the best assistant for Security & Authorizations.

With the support of smartGRC, you can take your organisation to a higher level of security. Find out how to quickly achieve key goals for the security of your business. OUR CUSTOMERS