Category: Research

Executive Summary 

Organizations face increased pressure to ensure business applications such as Enterprise Resource Planning (ERP) systems are secure and access control risks are managed in the context of a dynamic business environment. Segregation of Duties (SoD), inherited rights, critical and super user access, and changes to roles are too much for today’s organization to manage adequately in manual processes involving spreadsheets, documents, and email as they are time-consuming, prone to mistakes and errors, and can leave the business exposed.  By automating access controls, organizations take a proactive approach to avoiding risk while cutting down the cost and time required maintaining controls, being compliant, and mitigating risk. However, automated access control/SoD solutions are known to be exorbitantly expensive and take a considerable amount of consulting resources and time to implement. ERP Maestro is an innovative access control/SoD solution that GRC 20/20 has researched that takes a cost effective approach by using the cloud to make automated access control/SoD efficient and agile as well as effective. ERP Maestro has proven that it is as or more effective in access control and SoD as its competitors but it does this at a fraction of the cost to implement and maintain.  

{rsfiles path=”2014-02_Solution-Viewpoint_ERPMaestro_Web-Version.pdf”}{else}

Access to GRC 20/20 published research requires a subscription.  There are two primary tiers of research subscription:

1. GRC 20/20 Basic Subscriber (Free).  This gives you access to a broad range of content at no cost.  This includes Strategy Perspectives (best practice research), Vendor Viewpoints (research documents on specific solution providers), Case Studies, and more.
2. GRC Advisor Access.  This is a paid subscription that starts at $5,000.  This level of membership gives you access to more detailed market research such as Market Landscapes and Buyer Guides.  It also gives you inquiry access to GRC 20/20 research analysts to get your questions answered as well as four longer strategy calls that can be combined into a single strategy day.