GRC340 SAP Risk Management

Transcription

1 SAP Risk Management SAP BusinessObjects - Business Intelligence Course Version: 96 Course Duration: 3 Day(s) Publication Date: 2015 Publication Time:

2 Copyright Copyright SAP SE. All rights reserved. No part of this publication may be reproduced or transmitted in any form or for any purpose without the express permission of SAP SE. The information contained herein may be changed without prior notice. Some software products marketed by SAP SE and its distributors contain proprietary software components of other software vendors. Trademarks Microsoft, WINDOWS, NT, EXCEL, Word, PowerPoint and SQL Server are registered trademarks of Microsoft Corporation. IBM, DB2, OS/2, DB2/6000, Parallel Sysplex, MVS/ESA, RS/6000, AIX, S/390, AS/400, OS/390, and OS/400 are registered trademarks of IBM Corporation. ORACLE is a registered trademark of ORACLE Corporation. INFORMIX -OnLine for SAP and INFORMIX Dynamic ServerTM are registered trademarks of Informix Software Incorporated. UNIX, X/Open, OSF/1, and Motif are registered trademarks of the Open Group. Citrix, the Citrix logo, ICA, Program Neighborhood, MetaFrame, WinFrame, VideoFrame, MultiWin and other Citrix product names referenced herein are trademarks of Citrix Systems, Inc. HTML, DHTML, XML, XHTML are trademarks or registered trademarks of W3C, World Wide Web Consortium, Massachusetts Institute of Technology. JAVA is a registered trademark of Sun Microsystems, Inc. JAVASCRIPT is a registered trademark of Sun Microsystems, Inc., used under license for technology invented and implemented by Netscape. SAP, SAP Logo, R/2, RIVA, R/3, SAP ArchiveLink, SAP Business Workflow, WebFlow, SAP EarlyWatch, BAPI, SAPPHIRE, Management Cockpit, mysap.com Logo and mysap.com are trademarks or registered trademarks of SAP SE in Germany and in several other countries all over the world. All other products mentioned are trademarks or registered trademarks of their respective companies. Disclaimer THESE MATERIALS ARE PROVIDED BY SAP ON AN "AS IS" BASIS, AND SAP EXPRESSLY DISCLAIMS ANY AND ALL WARRANTIES, EXPRESS OR APPLIED, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, WITH RESPECT TO THESE MATERIALS AND THE SERVICE, INFORMATION, TEXT, GRAPHICS, LINKS, OR ANY OTHER MATERIALS AND PRODUCTS CONTAINED HEREIN. IN NO EVENT SHALL SAP BE LIABLE FOR ANY DIRECT, INDIRECT, SPECIAL, INCIDENTAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES OF ANY KIND WHATSOEVER, INCLUDING WITHOUT LIMITATION LOST REVENUES OR LOST PROFITS, WHICH MAY RESULT FROM THE USE OF THESE MATERIALS OR INCLUDED SOFTWARE COMPONENTS. g

3 Contents Contents Course Overview... v Course Goals... v Course Objectives... v Unit 1: Introduction to Risk Management... 1 Risk and Business Environment... 1 Risk Management Process Overview... 1 Unit 2: Risk Planning... 2 Master Data... 2 Organization Hierarchy and Views... 2 Objective Hierarchy... 2 Activity Hierarchy... 2 Risk and Response Catalogs... 3 Unit 3: Risk Identification... 4 Activity Management... 4 Risk/Opportunity Creation... 4 Unit 4: Risk Analysis... 5 Surveys... 5 Risk Analysis... 5 Collaborative Risk Assessment... 5 Risk Grouping... 6 Risk Interrelationships... 6 What-If Scenario... 6 Monte-Carlo Analysis... 6 Risk Validation... 6 Unit 5: Risk Response... 7 Responses and Enhancement Plans... 7 Response Assignment... 7 Create a New Response in a Risk... 7 Residual Risk Analysis (Current)... 7 Assign a Control to a Risk... 8 Control Proposal SAP SE. All rights reserved. iii

4 Contents Unit 6: Key Risk Indicators... 9 Introduction to Key Risk Indicators... 9 KRI Design... 9 KRI Template Creation... 9 KRI Implementation... 9 KRI Instantiation KRI Localization KRI Business Rules HANA Based KRIs Unit 7: Risk Monitoring Planner...11 Unit 8: My Home...12 Work Inbox Ad Hoc Tasks Ad-hoc Risk Escalation Unit 9: Roles and Authorizations...13 Roles and Authorizations Unit 10: Enhanced Features...14 Enhanced Features SAP SE. All rights reserved. iv

5 Course Overview Course Overview This course will discuss the functionality of SAP Risk Management. We will discuss what risks and opportunities are in a business environment, the different types of responses for risks as well as Key Risk Indicators and how they are used. This course will also explain the master data that is used in SAP Risk Management and how they relate to each other. Target Audience This course is intended for the following audiences: Risk managers who will be using SAP Risk Management Course Prerequisites Required Knowledge Understanding of risks and opportunities in a business environment. Course Goals This course will prepare the participant to: Identify risks and opportunities Run the various types of risk analysis Add responses to risks Understand key risk indicators and how they are used in SAP Risk Management Course Objectives After completing this course, the participant will be able to: Identify risks and opportunities in a business environment. Run the various types of risk analysis. Add responses to risks. Explain key risk indicators and how SAP Risk Management uses them SAP SE. All rights reserved. v

6 Course Overview 2015 SAP SE. All rights reserved. vi

7 Unit 1 Introduction to Risk Management Unit Overview This unit will introduce you to risk management and provide an overview of the typical process to identify, analyze, treat, and monitor risk. Lesson: Risk and Business Environment Explain how risk can influence business performance List the various sources of risk Define enterprise risk management List the benefits of enterprise risk management Identify requirements for effective enterprise risk management Lesson: Risk Management Process Overview Define risk and list the determinants for the degree of risk Explain the risk management process steps 2015 SAP SE. All rights reserved. 1

8 Unit 2 Risk Planning Unit Overview In this unit, you will learn about the master data used for risk management with SAP Risk Management. Lesson: Master Data Describe the types of master data used in SAP Risk Management Lesson: Organization Hierarchy and Views Navigate in the organization hierarchy Create and set up a new organizational unit Share organizational structure between organizational views Lesson: Objective Hierarchy Navigate in the objective hierarchy Create and set up a new objective Lesson: Activity Hierarchy Navigate in the activity hierarchy Create and set up a new activity hierarchy 2015 SAP SE. All rights reserved. 2

9 Lesson: Risk and Response Catalogs Navigate in the risk and opportunity hierarchy Create and set up a new risk category Create and set up a new risk template Populate a template risk in the system as an active risk 2015 SAP SE. All rights reserved. 3

10 Unit 3 Risk Identification Unit Overview In this unit you will learn about activities and their relationship to organizational units and risks, and how to create a risk with SAP Risk Management. Lesson: Activity Management Describe the purpose of activities Explain how to create an activity Lesson: Risk/Opportunity Creation Create a risk 2015 SAP SE. All rights reserved. 4

11 Unit 4 Risk Analysis Unit Overview In this unit you will learn how risks can be analyzed with SAP Risk Management. Lesson: Surveys Explain how surveys work Explain how to create a risk survey Lesson: Risk Analysis Explain the difference between inherent and residual risk Explain the difference between qualitative and quantitative risk analysis Explain how a risk level matrix is constructed Perform a residual risk analysis Lesson: Collaborative Risk Assessment Trigger a collaborative risk assessment Explain the difference between risk experts and risk owners and their respective roles in a collaborative risk assessment Explain the different options for performing a collaborative risk assessment using surveys, planner, workflow inbox, and Perform a collaborative assessment as an expert participant Perform monitoring and consolidation of a collaborative assessment as a risk owner Update the risk with the results of the collaborative assessment 2015 SAP SE. All rights reserved. 5

12 Lesson: Risk Grouping Create grouped risks Lesson: Risk Interrelationships Create risk interrelationships Lesson: What-If Scenario Create a scenario classification and subclassification Create a scenario case Create a scenario case analysis Create a response to a scenario case Review the scenario case and use sensitivity analysis Lesson: Monte-Carlo Analysis Explain Monte Carlo analysis. Perform a Monte-Carlo Analysis. Lesson: Risk Validation Validate a risk analysis 2015 SAP SE. All rights reserved. 6

13 Unit 5 Risk Response Unit Overview In this unit you will learn how responses are used with SAP Risk Management. Lesson: Responses and Enhancement Plans Explain the purpose of the Responses and Enhancement Plans catalog Create a catalog response Lesson: Response Assignment Explain the purpose of risk responses Explain how residual risk (planned) is determined Assign a risk to a response in the Risk Response tab Perform a residual risk analysis Review the overall residual risk (planned) Lesson: Create a New Response in a Risk Explain the reasons for creating a response directly within a risk. Assign a response to a risk in the Risk Response tab. Lesson: Residual Risk Analysis (Current) Explain how the response completeness and effectiveness are updated 2015 SAP SE. All rights reserved. 7

14 Update the response completeness and effectiveness and thereby create the current residual risk result Lesson: Assign a Control to a Risk Assign a control to a risk Lesson: Control Proposal Propose a control to manage a risk 2015 SAP SE. All rights reserved. 8

15 Unit 6 Key Risk Indicators Unit Overview In this unit you will learn how risks can be analyzed with SAP Risk Management. Lesson: Introduction to Key Risk Indicators Explain how KRIs are used in risk management Explain the process for creating a KRI Lesson: KRI Design Explain what is needed to design a KRI Explain why SAP Query is needed Lesson: KRI Template Creation Create a KRI template Request a KRI implementation Lesson: KRI Implementation Implement a KRI 2015 SAP SE. All rights reserved. 9

16 Lesson: KRI Instantiation Add an implemented KRI to a risk Lesson: KRI Localization Request the localization of a KRI Lesson: KRI Business Rules Configure a KRI business rule. Lesson: HANA Based KRIs explain what HANA Based KRIs are and how to connect KRIs to Analysis SAP SE. All rights reserved. 10

17 Unit 7 Risk Monitoring Unit Overview In this unit you will learn how SAP Risk Management supports risk monitoring. Lesson: Planner Explain how the planner works Explain how to create a risk assessment workflow using the planner 2015 SAP SE. All rights reserved. 11

18 Unit 8 My Home Unit Overview In this unit you will learn about the variety of tasks and functions available in the SAP Risk Management My Home work center, as they relate to risk management. The My Home work center covers tasks and functions relevant to access controls, process controls, and risk management. Lesson: Work Inbox Explain the use of the work inbox Execute a task in the work inbox Lesson: Ad Hoc Tasks Explain the use of Propose a Risk Explain the use of Report an Incident Propose a risk Report an incident Lesson: Ad-hoc Risk Escalation explain how to create and validate Ad-hoc Risk Escalation SAP SE. All rights reserved. 12

19 Unit 9 Roles and Authorizations Unit Overview In this unit you will learn how roles and authorizations are handled in SAP BuinessObjects Risk Management. Lesson: Roles and Authorizations Explain the contribution of the SAP NetWeaver back end, risk management application, and enterprise portal to authorizations Identify the roles delivered as standard Business Content Explain the concepts of delegation and replacement 2015 SAP SE. All rights reserved. 13

20 Unit 10 Enhanced Features Unit Overview This unit will introduce you to enhanced and advanced features of SAP Risk Management. Lesson: Enhanced Features Explore Risk Data Management at Organization Level. Understand Corporate Risk Management. Use Risk Terminology Editor. Explain Ad-hoc Risk Escalation. Explain Risk Based Control Self-Assessment SAP SE. All rights reserved. 14