Name: Positioning SAP Business Suite for Governance, Risk, and Compliance - Part 1 – PET 2026
Uploaded: 2026-4-30
Duration: 878 s

Share feedback

<p>We are aware of intermittent issues in accessing the learning content</p>

We are aware of intermittent issues in accessing the learning content

Personalize your learning.

Why create an SAP account?

Enhance your learning experience

SAP Learning

Choose your subscription

Manage your subscription

Activate your subscription

Live Sessions

Hands-on Practice

Certification

My Learning

Ready to start learning?

This browser is not supported

Show more

Ooops, something went wrong!

Oh no! Tell us how we can improve.

Great! We value your feedback

Thank you!

Browse by capability

Please wait

Please try again later

Sorry, we encountered an error

Try again or reset results to continue browsing

We didn't find what you're looking for

To continue, please log in

Your session has timed out

Validate your skills and learning by completing the certification exam and gain a highly recognised accreditation.

Book your certification exam

Complete the assessment to validate your SAP PartnerEdge competency qualifications.

Ready to take your assessment?

Learn about the key features and essentials in the latest release to help you prepare for the Stay Certified assessment.

Prepare for assessment

Learn new skills you need at your own pace with our bite-sized lessons.

Prepare for certification

In your My Learning account you can view your certification and learn how to take your Stay Certified assessment.

Ready to take your Stay Certified assessment?

Get tailored answers, tune into podcasts, and dive deeper with interactive study guides, mind maps, FAQs and more.

Upskill faster with AI-powered assistance

Upgrade to AI-powered learning

Enroll to Google NotebookLM to flexibly interact with SAP Learning content. It's free and activates instantly.

You are all set. Google NotebookLM is now active. You will have access to AI powered learning for all our eligible courses.

Enrollment successful!

Get started with AI-powered learning

Explore {title} at SAP Learning. Find out more!

Assessment

Course Completion

Knowledge Badge

Overview

Support Resource

Certification Exam

Theoretical Exam

Schedule

External Course

Practical Exercise

Practical Test

External Hands-On

External Resource

Learning Journey

Learning Journey Assessment

Lesson

Live Session

Practice System

Hands-on Practice for {title}

Quiz

Scenario Based Assessment

Course Assessment

Course

SAP Expert Lectures

Stay Certified

Subscription

System Based Assessment

Unit

Video

Video Playlist

Week

Want to remove this from your Learning List?

You have until July 30, 2026 to complete your Stay certified assessment.

Your SAP Certification extension is now active!

Your exclusive access to the SAP Learning Hub, Event Edition is ready. <link>Start learning now.</link>

Access activated

You can now register for free Live Sessions.

<div><div><div><div><div>SAP Business Suite Product Expert Training (PET) H1 2026 / Finance and risk / SAP S/4HANA Cloud / SAP Clous ERP / GRC<br><br>This video covers the key challenges organizations are facing today and how these challenges impact their business objectives. It also explores future trends and explains how SAP GRC and the SAP Business Suite can help organizations address these challenges and prepare for what’s ahead.<br><br>Ask your questions in our <a target="_blank" rel="nofollow noopener noreferrer" href="https://community.sap.com/t5/enterprise-resource-planning-q-a/qa-p/erp-questions">community</a> using the PET_Enablement tag under “Question User Tags.” <br><br>Here is the <a target="_blank" rel="nofollow noopener noreferrer" href="https://d.dam.sap.com/a/kEYLLUi/Positioning-SAP-Business-Suite-for-GRC-Pt-1.pdf?rc=10&inline=true&doi=SAP1308425">slide deck</a>. <br><br>Please note that captions have not been edited.</div></div></div></div></div>

Positioning SAP Business Suite for Governance, Risk, and Compliance - Part 1 – PET 2026

Hello everyone and thanks for joining the Product Expert Training 2026. This session kicks off a new series where we will explore how the SAP Business Suite is evolving across GRC, trade and tax. Today's part one where we will give you a high level overview of our GRC solutions. So in upcoming sessions we will dive deeper into each topic in more detail way. Before we get started here is the disclaimer the information shared in this session is confidential and for SAP use only. Well my name is Hironia Runodi Badulde and I will be your moderator for today's session. We have two experts with us today Thomas and Ant. They will talk about how to position the SAP business suite or GRC. So before we dive in let's quickly set the context for the series finance and risk covers the entire financial landscape from planning and analysis to record to report invoice processing and also treasury along with everything related to GRC tax and trade. For today we will focus on a high level for view of governance risk and compliance. Let me quickly walk you through today's agenda. First, we will look at the key challenges organizations are facing today and how these trends impact business objectives. Then we will look ahead at what the future hauls and how the PGRC and the SAP Business Suite help address these needs. So let's get started. Over to you, Arndt and Thomas. I'm Arndt Lingscheidt, Product Marketing Manager for the Cybersecurity Solutions at SAP. So jumping right into the presentation, I don't think I need to repeat what you already know and what you've already seen. Well, we are in uncharted territories with low gross inflationary economy, high cost of capital and increasingly constraining regulations, all underpinned by rapidly changing geopolitical shifts and arranging tariff wars across the globe. These are the external forces that company executives have to deal with, but don't really have a say in. But on the other hand, they also face internal hurdles, such as the fact that they need to steer the company's ship with data broken down in silos and often in questionable data shape and data quality. They also have to deal with the fact that many processes are manual, so error prone, and of course, that errors can happen then very easily. In the middle of this mist, the core obligations still remain the same, which I summarize in three buckets, are actually managing the uncertainty, still acting compliant, and also enable compliance in the ever-evolving regulatory and risk environment. And, of course, navigating the business transformation to enable compliance, future, and growth for the organization. When looking at the facts and figures and the risks in general, risk pioneers have been proven to be 2.6 times more likely to have improved financial performance due to effective risk mitigation within the past years. So on the other hand, we do see more than 10 trillion U.S. dollars drained from the global economy through cybercrime on an annual basis. But often, yeah, organizations did not really pay too much attention to it. And only when legal legislations came in, they started to pay attention. And nowadays, 70% of the companies running SAP must navigate legal legislations like GDPR, like NIST2, like CRITIS, like DORA or any other local security laws. But on the other hand, while still 87% of the companies are experiencing a shortfall of talent and, for example, security forces within their organization. So this is what the OCFO of an organization needs to deal with, or the CFO of an organization. So in a nutshell, the conclusion is that companies operate with quite poor visibility on risk. But more importantly, this is especially true for emerging risks, so risks that they haven't seen before. This translates into silent risk approaches, fragmented reporting, and reactive compliance. Furthermore, companies have to face flawed controlled libraries that are not linked with the risk and inconsistent data quality, which hinders visibility and creates a lot of question marks. This, therefore, doesn't really help executives in their daily decision-making processes. All right, from here, over to Thomas, please. Thanks, Arins. Next one, please. I love what you mentioned about the unchartered territories, because this slide, which is a top 10 risk that we have identified as upcoming for companies, is exactly that. You may recall that in the previous years, we typically had a ranking, top risk 1, 2, 3, 4, 5. This year, it can't be done because there is so much discrepancy in views in what is a top risk and what is not. But there is one common thread. All the risks are now interconnected. And a change in impact in one of them, or in likelihood in one of them, strongly influences the other ones as well. Next one, please. So in addition to the top risks, there are also top compliance issues aren't mentioned or the process that companies need to follow for governance, compliance, and so on, so forth, and the automation. But in addition to the top risks, there are also top compliance requirements that are on the radar of companies. And these are slightly changing. But in essence, what is really interesting to see is that cybersecurity is trusting the first place. It's not a surprise to the attendees, I'm sure. data protection, data residency, data privacy regulations have been flurrying for the past few years. But there is a new component, trusted AI. The AI Governance Act in Europe, the ones in the states, in the various states in the United States, is also becoming a conundrum for organizations. And whether they deal with them in a solid way, or they embed this into their overall compliance framework will be a question. ESG also continues to be a top conundrum. Now, I know we've hearing of regulators in Europe, but also in the US, ramping down on ESG. But for companies, this is still a top topic. If it's not just for compliance, take it also to make sure that they run a more resilient business. And last but not least, sanctions export control were already big last year. They continue to be this year. And this ties back to digital and operational residency for the company. So all of this together makes 75% of the regulatory requirements that a company need to face, but that's not to exclude all the others like fraud, scam, tax, and so on and so forth that are still there and that will continue to be here. Next up, please, Art. Okay, so why do they need better risk and compliance? Well, Art mentioned the objectives, having a sound risk management, being in compliance, but also optimizing your performance and your decision to be more proactive. There are a few obstacles. Art mentioned the constraints in resources, but there's also a constraint in budget budget is unfortunately not unlimited we all know this i wish it were but it's not the case the complexity aren't quickly touched upon the disparate systems saying that an executive doesn't have the full information it's the very same for risk and compliance some risks sit in a very niche system and are never brought back to light so this creates a lack of visibility at the c-suite but also at every other level with these objectives and these obstacles there are key requirements that company need to achieve or want to achieve First is informed decision-making. How good is it to have the best system in the world if you are not able to make a decision because you don't trust the data? So what they want is information structured together and a centralized regulation management, a centralized compliance and a centralized tool as well to provide visibility that was so clearly lacking to the C-suite, but also to all the executives. If this is done, and I am pretty sure it can be done, Then we will change the health slide that aren't presented into a heaven slide with a unified risk management information flowing from the various systems into your risk system with the ability to report and monitor on all risk types that your company can face, implementing the business controls and the compliance aspects that you need, testing them, documenting them and making use of the AI to reduce this manual burden into something a lot more automated. and then the various type of risk categories that you can face or that companies can face like financial operational and so on and so forth become potentially opportunities they can get financial gain by identifying risks early and making sure they avoided or leverage benefits and this brings me to what the future could look like i mentioned quickly benefits because there are always two sides of a risk there is the downside which is typically what we call the risk or the threat, but there is also the opportunity, the upside. And risk management and compliance shouldn't only be about making sure you're in compliance or making sure you avoid pitfalls. It should also help companies thrive into this uncharted territory that aren't mentioned. And an uncharted territory is filled with emerging risks. Well, our intent is to provide the right tools to help companies harmonize their controls, their security, their identity and accesses as well into a unified reporting where they can identify the emerging threats before they happen and they can identify emerging opportunities and leverage them to their fullest. And if this is done, again, all the key requirements that I mentioned the companies will be addressing, will be requiring, sorry, will be addressed and they will be addressed by SAP GRC with the business suite. SAP GRC by itself doesn't have all the data that you need to do this but together with the business suite it helps take together application business data and ai to combine all the process and to automate all the process provide a single source of truth for the organization so that they can make their business decision with a significant impact last here on the topic is the fact that grc doesn't operate in a silo it is not an add-on that you just plug in and let run. No. GRC processes are natively embedded in all the business process of the organization, all these core operations. If you start with the beginning, setting the objective is what every company should do, right? If you don't know where you're navigating, why are you even trying to get on a path? Well, here, you may have risks, you may have opportunities. So being able to identify this, and it's not just the risk team, but also the audit team. We often talk about risk-based audits. This is exactly what it is. The audit team shouldn't be focused on just compliance, should be trying to identify what helps the business thrive better. And then within each of the macro process, so design to operate, record to report, and so on and so forth, you will have the different controls, the tax controls, the operational controls, the IT controls, the cybersecurity controls, that make sure the process is being respected and that any discrepancy is identified and mitigated. And one of them, a key one, is who has access to what can user create and and and pay an invoice at the same time well managing the identity is key because if you have the control but someone can bypass them then it is no good cyber security underpins all of it because if your control can be bypassed or if your control is failing because it doesn't run properly then you are not in compliance or you're not even in resilience and of course this all needs to be encapsulated by reporting and the reporting is not just an after-the-fact information providing a beautiful dashboard with a lot of colors that is not actionable no no the reporting needs to be information that executives operators anybody can consume and drill down directly to the source system to understand what is the discrepancy can it be solved at the source let me take a very simple example a tax control if there's an information missing let's say a vat number missing on a document reporting it is no good being able to drill down into the exact document and updating that information so that this issue is not picked up again in the future this is what brings value and why the grc suite with the sap business suite together creates this opportunity well thanks to our experts thomas and ann for their continued support and contributions so all these enablement and community resources are here to support you And if you have any questions, feel free to ask. We have Learning Journeys, the SAP Help Portal, Expert Talks and Roadmap Weaver and many more. Please stay tuned for more Product Expert Trainings which will be released every Friday. So in the meantime, feel free to check out our community and post your questions. If you have any questions or feedback, please feel free to send us an email. You can also post your questions on the community page using this specified tag. So thank you so much for your attention. We will be releasing more videos in the upcoming week so please stay tuned.