SAP GRC for Dummies -- Contents at a Glance -- Table of Contents -- Introduction -- About This Book -- Foolish Assumptions -- How This Book Is Organized -- Icons Used in This Book -- Where to Go from Here -- Part I: Governance, Risk, and Compliance Demystified -- Chapter 1: The ABCs of GRC -- Getting to Know GRC -- Getting in the Business Drivers' Seat -- Getting Motivated to Make the Most of GRC -- Introducing the GRC Stakeholders -- Understanding GRC by the Letters -- C Is for Compliance: Playing by the Rules -- R Is for Risk: Creating Opportunity -- G Is for Governance: Keeping Focused and Current -- Hitting the Audit Trail -- Designing Your Approach to GRC -- What GRC Solutions Provide -- Chapter 2: Risky Business: Turning Risks into Opportunities -- Discovering Enterprise Risk Management -- Defining Risk -- Ignoring Risk (At Your Peril) -- Sorting Through the Approaches to Risk Management -- Identifying the Critical Components of a Successful Risk Management Framework -- Taking the Four Steps to Enterprise Risk Management -- Analyzing What Went Wrong: When Risk Becomes Reality -- Automating the Risk Management Cycle -- Taking the SAP Approach: SAP GRC Risk Management -- Using SAP GRC Risk Management: A Fictional Case Study -- Using SAP Risk Management: An SAP Case Study -- Gleaning the Benefits of SAP GRC Risk Management -- Chapter 3: Governance: GRC in Action -- Getting to Know Governance -- Gleaning the Benefits of Good Governance -- Drafting Governance Blueprints -- Creating a Framework for Great Governance -- Evaluating Your Governance Framework -- Hurdles to Instituting and Maintaining a Good Framework -- Making the Argument for Automation -- The SAP Approach: Integrated Holistic IT for GRC -- Coming to Grips with Governance -- Part II: Diving into GRC -- Chapter 4: How Sarbanes and Oxley Changed Our Lives.

Figuring Out Whether SOX Applies to You -- Discovering Why SOX Became Necessary -- Who Are Sarbanes and Oxley, Anyway? -- Breaking Down SOX to the Basics -- Information Technology: SOX in a Box -- Paying Up: What's SOX Going to Cost You? -- Setting the Record Straight -- Other Laws You Need to Know About -- We're All In This Together: Convergence -- Sorting Out the Benefits of SOX -- Chapter 5: Fraud, Negligence, and Entropy: What Can Go Wrong and How to Prevent It -- Defining Fraud -- Negligence: More Likely Than Fraud -- Entropy: Errors, Omissions, and Inefficiencies -- Cleaning Up: The Mop-Up Operation -- Chapter 6: Access Control and the Role of Roles -- Understanding Access Control and Roles -- Getting a Handle on Access Control -- How Access Control Got Messy -- Getting Clean -- Staying Clean -- Managing Exceptional Access -- The SAP Approach: SAP GRC Access Control -- Where Do You Go from Here? -- Chapter 7: Taking Steps toward Better Internal Controls -- Understanding Internal Controls -- Exploring the Benefits of Better Controls -- Seeing How Automating Controls Makes Things Easier -- Taking Five Steps to Better Internal Controls -- Getting to Know the SAP Approach: SAP GRC Process Control -- Chapter 8: It's a Small World: Effectively Managing Global Trade -- Understanding Four Reasons Why Global Trade Is So Complex -- Figuring Out the Complexities of Importing -- Making Sure You're Complying with All 19,391 Exporting Restrictions -- Taking Advantage of the System: Trade Preference Management -- Discovering the Different Ways to Manage Global Trade -- Using the SAP Approach: SAP GRC Global Trade Services -- Part III: Going Green -- Chapter 9: Making Your Company Environmentally Friendly -- Discovering the Three Ps of Going Green: People, Processes, and Products -- Going Green: It's Not Just for Tree-Huggers Anymore.

Understanding Why Your Company Should Go Green -- Going Green Is Good Business -- Implementing Green Practices -- Going Green Is also the Law -- A Final Word About Going Green -- Chapter 10: Keeping Employees Healthy and Safe -- Keeping Your Employees Safe and Healthy: The Big Picture -- Moving Down the Road to Zero Accidents -- Making the Case for Automation and Integration -- Taking the SAP Approach to Employee Health and Safety -- Chapter 11: Making Your Business Processes Environmentally Friendly -- Discovering Ways in which All Companies Can Go Green -- Reducing Your Energy Use and Costs -- Building, Renovating, and Cleaning with Sustainable Resources and Materials -- Getting LEED Certified -- Assessing Your Environmental Risks -- Greening Manufacturing -- Adopting Green Practices for Manufacturing -- Taking the SAP Approach to Making Your Processes Environmentally Friendly -- Chapter 12: Making Your Products Environmentally Friendly -- Discovering What It Takes to Make Products Environmentally Friendly -- Figuring Out What Your Materials Are and What They Do -- Realizing the Benefits of Compliance -- Using Hazardous Materials Responsibly -- Working with Hazardous Materials -- Keeping Up with Materials Legislation -- Exploring the SAP Approach to Product Compliance -- Part IV: : Managing the Flow of Information -- Chapter 13: Sustainability and Corporate Social Responsibility -- Discovering the Great Power and Responsibility of Big Companies -- Getting the Lowdown on Sustainability -- Discovering Why Sustainability Is Good Business -- Discovering the Possible Downside of CSR -- Managing Sustainability Performance -- Discovering Why an Automated Solution Is Needed -- Chapter 14: IT GRC -- Getting a Handle on What IT GRC Is -- Understanding IT Governance in Terms of Risk and Compliance -- Securing Your Software Applications.

Keeping the Kimono Closed: Data Privacy -- Protecting Key Corporate Assets: Intellectual Property -- Chapter 15: Turning On the Lights with GRC and CPM -- Turning On the Lights with CPM -- Making the Case for CPM and GRC Integration -- Seeing CPM and GRC Integration in Practice -- Discovering the Reusable Technology of GRC -- Part V: The Part of Tens -- Chapter 16: Top Ten GRC Strategies -- Evaluate Which of the Most Prevalent GRC Issues Apply to You -- Adopt Best Practices -- Implement Key GRC Strategies -- Set Yourself Up for Success -- Watch Out for Danger Signs -- Define GRC Roles and Responsibilities -- Shake Down the People Who Know -- Move to Strategic Adoption of Automated Controls -- Adopt Strategies for Cleaning Up Access Control -- Getting Your GRC Project Going and Keeping It Going -- Chapter 17: Ten Best Practices in Global Trade -- Automate or Else -- Don't Go to Pieces -- Make Sure You Can Trust Your Partners -- Avoid Importing Delays -- Get On Board with the Government's High-Tech Documenting Processes -- Know Who Is Allowed at the Party -- Know Who You're Shipping to -- Get the Right Licenses -- Take the Free Money -- Leave a Paper Trail -- Chapter 18: Ten Groups of GRC Thought Leadership Resources -- GRC Resources -- Risk Resources -- SOX Resources -- Financial Compliance Resources -- Access Control and Process Control Resources -- IT GRC Resources -- Global Trade Resources -- Employee Health and Safety Resources -- Going Green Resources -- Sustainability Resources -- Glossary -- Index.