Risk Management Plan ERP WW Implementation

Hello All
I´m developing a Risk Management Plan and need to identify risks related to ERP implementation in multiple geographies. The implementations will be based on the same template and the template, a base model, will be managed in a centralized way by the corporation, both from a process and from an IT perspective, e.g., process changes that impact the base model will be approved by a centralized group responsible for the integrity of the base model. These changes, if approved, will be incorporated to the base model under a strict versioning and configuration management policy. The Business and IT organizations will have to manage both the integrity of the base model (and its versions) and the rollout of specific versions to the geographies. Geographies include Latin America, North America, Africa.
I´m willing to identify risks of the strategy to the business itself (the strategy I described above) and it´s impact on the IT organization/processes that will need to support it. This company already runs SAP on it´s biggest business unit, now it will be expanding the solution to smaller BUs in other countries. The base model currently used by the corporation is different than the base model (template) that will be implemented in the smaller BUs, for historical reasons.
A good start could be a Risk Assessment (part of a typical Risk Management Plan) of an ERP implementation project with similar characteristics, e.g.: multiple geographies, different Business Units in these geographies, having to ensure integrity of the base model (template), etc...
Does anyone have anything similar to this that I could use as a start? Thanks.
Message was edited by:
        José Welington Nogueira Filho

Hi Jose,
Its quite interesting that you are working on Risk management . Risk management Plan requires to analyze the organization based on its Operations,Financial activities.
As per my understnading Risk management process is involved or can be segregated based on the following classification .
a) Financial Risk
b) Operational Risk
c) Strategic Risk
d)External Risk
Your Risk management Plan cna start up with the identify, categorize and analyze enterprise risks.
a) Financial Risk:
        -  Based on the complexity ,size and nature of organization identify first top
           ten financial risks in the company.
b) Operational Risks:
        -  Quality
        -  Hiring and retention
        - Supply Chain
        - Succession Planning
c) Strategic Risks:
        - Intellectual Property Infringement / Counterfiet
        - Business Model and portfolio
        - Resource alignment
d) Exteran Risks:
        - Catastophic/Business Interrruption
        - Technological innovation
        - Competetors
While coming to Risk management Life-Cycle:
1. Validation and verification
2. Risk Treatment process
3. Governance & Monitoring
Based on the Low and high point methods you can identify the risks and give ranks based on the risk priority and prepare a graphical presentation .
As per above risks classification i am giving you more classification it will help you to prepare your Risk management plan in detailed ananlysis:
a) Financial Risks:
       -  Cash Flow
       - Credit
       -  Debit
       - Equity
       - Interest rates
b) Operational Risks;
      - Catastophe /BI
      - Change Mangement
      - Security
c) Strategic risks:
      - Brand repuatation
      - Business Model Portfolio
      -Channel
      - IP Infringment/Counterfiet
      - Quality
      - Resource allocation /Alignment
d) External Risks:
       - Competeiotrs
       - Customers Needs / Product support
       - Legal / anti-trust
       - Regulatory / Taxation
       - Technological Innovations
This information will help you to start your Risk analysis Plan. Please let me know if you need any thing esle on this.
Please award points if this is helpful.
Regards,
Ramesh Choragudi

Similar Messages

  • Available now: New Business Transformation Study for Aurubis on the 7 month implementation and success with SAP Commodity Risk Management

    We just published a Business Transformation Study with Aurubis AG, the world’s leading integrated copper producer, on how SAP Commodity Risk Management solution helps them to hedge commodity price risks with the highest accuracy and integration and to meet stringent compliance regulations like EMIR with lowest risk, effort, and cost.
    With SAP Commodity Risk Management, all business processes related to commodity derivatives including the settlement, accounting and payment processes are now integrated and generated within the existing SAP ERP system. Please read the BTS here .

    Thanks Samuli.
    You're right, it seems BAdI HRESS_NWBC_MENU_EXT will work. I think I didn't make myself very clear as I didn't say that launchpad menu will no longer be used with NWBC since we will use the left side navigation, much user friendly and quicker to access to.
    Reading SAP documentation it seems this BAdI (available from EHP7+) will solve my issue.
    Thanks for the hint.
    Do you see any blocking point from moving SAP Portal to SAP NWBC for HTML even with 12000+ users?
    Thanks again.
    Best Regards,
    AS

  • Enterprise Risk Management Approach in SAP GRC

    Hi All,
    Can you please let me know  as to what is the approach followed for implementation of  Enterprise Risk Management (ERM) in SAP GRC.  Also please tell me how the internal control frameworks like COSO, COBIT is mapped to ERM in SAP GRC.
    Regards
    Vivek

    Dear Vivek,
    While assigning roles to users, you will be displayed the risks that are identified with those roles, if any. You can either mitigate or remove the roles.
    The process covered by GRC Risk management includes the following steps:
    -Risk Planning: Determines the approach to risk management in each business area or project. This includes setting up the risk management organization and defining risk thresholds . This phase is partially supported by a software application.
    -Risk Identification and Analysis: Identifies the risks in order to analyze and prioritize them along different attributes, such as probability of occurrence and potential total loss associated to the risk.
    -Risk Response: Decides on actions needed to respond to a risk. One action could be to actively mitigate the risk to reduce probability of occurrence and/or potential impact.
    -Risk Monitoring: Includes the regular update of risk information and the risk reporting to monitor progress along the risk management process.
    The Risk Management application provides a set of different reporting capabilities based on the individual needs of the target groups:
    -A set of built-in reports that are delivered with the application. These reports allow risk managers to review the current risk state.
    -Visual Composer based dashboards that provide information about the current risk status on an aggregated basis. The dashboards fulfill the risk reporting needs of senior managers and line managers.
    Step 1: You maintain the Risk structure
    1. You set up the organizational hierarchy
    2. You set up the Activity Hierarchy
    3. You set up the Risk Hierarchy
    Step 2: You perform the Risk Assessment
    1. You identify the risks
    2. You analyze the risks
    3. You respond to risks
    4. You document the Incidents
    Step 3: You analyze risk reports
    1. You generate risk reports
    2. You report the incidents
    Step 4: You analyze the dashboards
    Refer SAP documentation on GRC for more information.
    Regards,
    Naveen.

  • Ask the Expert: Plan, Design, and Implement Mobile Remote Access, the Cisco Collaboration Edge Architecture

    Welcome to the Cisco® Support Community Ask the Expert conversation. This is an opportunity to learn and ask questions about planning, designing, and implementing mobile remote access (Cisco Collaboration Edge Architecture) with Cisco subject matter experts Aashish Jolly and Abhijit Anand.
    Cisco Collaboration Edge Architecture is an architecture that provides VPN-less access of Cisco Unified Communications resources to Cisco Jabber® users. This discussion is dedicated to addressing questions about design best practices while implementing mobile remote access.
    For more information, refer to the Unified Communications Mobile and Remote Access via Cisco VCS deployment guide. 
    Aashish Jolly is a network consulting engineer who is currently serving as the Cisco Unified Communications consultant for the ExxonMobil Global account. Earlier at Cisco, he was part of the Cisco Technical Assistance Center (TAC), where he helped Cisco partners with installation, configuring, and troubleshooting Cisco Unified Communications products such as Cisco Unified Communications Manager and Manager Express, Cisco Unity® solutions, Cisco Unified Border Element, voice gateways and gatekeepers, and more. He has been associated with Cisco Unified Communications for more than seven years. He holds a bachelor of technology degree as well as Cisco CCIE® Voice (#18500), CCNP® Voice, and CCNA® certifications and VMware VCP5 and Red Hat RHCE certifications.
    Abhijit Singh Anand is a network consulting engineer with the Cisco Advanced Services field delivery team in New Delhi. His current role involves designing, implementing, and optimizing large-scale collaboration solutions for enterprise and defense customers. He has also been an engineer at the Cisco TAC. Having worked on multiple technologies including wireless and LAN switching, he has been associated with Cisco Unified Communications technologies since 2006. He holds a master’s degree in computer applications and multiple certifications, including CCIE Voice (#19590), RHCE, and CWSP and CWNP.
    Remember to use the rating system to let Aashish and Abhijit know if you have received an adequate response. 
    Because of the volume expected during this event, our experts might not be able to answer every question. Remember that you can continue the conversation on the Cisco Support Community Collaboration, Voice and Video page, in the Jabber Clients subcommunity, shortly after the event. This event lasts through June 20, 2014. Visit this forum often to view responses to your questions and the questions of other Cisco Support Community members.

    Hi Marcelo,
       Yes, there are some requirements for certificates in Expressway.
    Expressway Core (Exp-C)
    - Can be signed by either External or Internal CA
    - Better to use a cluster name even if you start with 1 peer in Exp-C cluster. In the future, if more peers are added, changes would be minimal.
    - Better to use FQDN of cluster as CN of certificate, this way the traversal zone configuration on Expressway-E won't require any change even if new peers are added to Exp-C cluster.
    - If CUCM is mixed mode, include security profile names (in FQDN format) as Subject Alternate Names
    - The Chat Node Aliases that are configured on the IM and Presence servers. They will be required only for Unified Communications XMPP federation deployments that intend to use both TLS and group chat. (Note that Unified Communications XMPP federation will be supported in a future Expressway release). The Expressway-C automatically includes the chat node aliases in the CSR, providing it has discovered a set of IM&P servers.
    - For TLS b/w CUCM, IM-P & Exp-C
      + If using self-signed certificates on CUCM, IM/P. Load Cisco Tomcat, cup, cup-xmpp certificates from IM-P on Exp-C. Load callmanager, Cisco Tomcat certificates from CUCM on Exp-C.
      + If using Internal CA signed certificates on CUCM, IM/P. Load Root CA certificates on Exp-C.
      + Load CA certificate under tomcat-trust, cup-trust, cup-xmpp-trust on IM-P.
      + Load CA certificate under tomcat-trust, callmanager-trust on CUCM.
    Expressway Edge (Exp-E)
    - Signed by External CA
    - Configured Unified Communications domain as Subject Alternate Name
    - If using a cluster, select FQDN of this peer as CN and FQDN of Cluster + this peer as Subject Alternate Name.
    - If XMPP federation is being deployed, enter the same Chat Node Aliases as entered in Exp-C.
    For more details, please refer to the Certificate Creation Guide for Cisco Expressway x8.1.1
    http://www.cisco.com/c/dam/en/us/td/docs/voice_ip_comm/expressway/config_guide/X8-1/Cisco-Expressway-Certificate-Creation-and-Use-Deployment-Guide-X8-1.pdf
    - Aashish

  • How to do planning of mdm implementation

    hi
    we want to install mdm in organization.
    We have more than 5 company ,
    and for 1 company has HR and sales diffrent server.
    how to do planning or go for mdm how to implent this

    HI,radhesh
    i think that your problem is more like a management consulting problem,to implement mdm system is just a way to make your organization run better,to support your business systems. we always follow the ASAP methodology,and also you can refer to the checklists guide at the preparation stage.here is the link:
    http://help.sap.com/nwmdm?current=netweaver&show_children=false
    by the way you need a service account to log on.
    hope it helps.
    best regards
    Stephen

  • Risk Management interactive reports drill up error

    Hi,
    I have been working with Risk Management 10 in SAP GRC recently.  I noticed that when using the Risk Manager Interactive Reports in the Report section (Heat Map and Overview Report), I have received an error when trying to drill back up to the parent organizational unit after I have drilled down to the child sub organization.
    Our current workaround is to click on the <All> unit, close the window, and then reopen the window and drill back down to the parent unit.  While this workaround has been successful when using the reports so far, it is difficult to communicate this error to other users when they attempt to use the reports.
    Are there any fixes to this error, or any plans to fix?  Otherwise, is there a feature that needs to be adjusted in Risk Management?  Thanks.

    Bump

  • SAP GRC 10.0 Risk Management - Forecasting Horizon Scoring Analysis Mode

    Hi everyone,
    In SAP GRC 10.0 Risk Management Support Package 7, we need to assess a corporate risk by performing an automatic analysis aggregation based on a scoring analysis profile.
    The problem is that corporate risks must be created based on a forecasting horizon.
    So, can we create forecasting horizons with scoring analysis mode? How? Must be enabled through customizing or applying a SAP note?
    Best Regards,
    Chema Traveso

    Hi,
    I think this is still user-specific, as it was in 5.X. I have checked the new GRC authorisation object parameters delivered within the roles and also tried to see if a Admin user was able to see all the variants created by the different users, but so far I have not found a solution.
    It may be worthwhile to raise this in "IdeaPlace", hoping it gets enough votes and SAP's attention for implementing in a future Support Pack delivery.

  • Risk Management & Process controls for non SAP client

    Hi Forum Gurus,
    I need clarity on the following:  Can Risk managment 3.0 and Process controls be implemented for a non-SAP client?
    i.e. Our client does not run SAP, but they are interested in RM and PC, so is this possible to implement?
    Any advice would be highly appreciated.
    Kind regards,
    PREVO.

    Hi Prevo,
    Process control and Risk management 3.0 are delivered within same installation package files so it is same for both the applications .
    Also real time agents for Oracle or peoplesoft are avaialble if you want to leverage the automated control functionality of PC 3.0 in non SAP environment.
    Remember the automated control functionality is the optional feature of PC3.0.If you wish only to use the manual controls features of PC 3.0 you dont need RTAs(real time agent).
    You can find further information about manual controls at http://service.sap.com
    use the quicklink '/rkt' then the following menu path: SAP Business Objects for GRC Solutions -> SAP BO Process Control 3.0 -> Technology Consultant
    Regards
    Debraj

  • Risk Management 10: Assign users based on Org structure

    Hello,
    In GRC Risk Management 10, you can assign users to a risk in the roles tab of a risk. 
    Is it possible to be able to assign any employee in HR org structure to one of these roles such as Risk Owner?
    More specifically, would it be possible to create a link such that only the employees in the assigned organization unit in the risk are shown in the list of users to be assigned to one of these roles?
    Thanks

    we have the scenarioas below
    need to integrate the third party HR system ORG structure entity to the Role based travle management approval task.
    but the process and workflow structure for all the department are same.
    only the roles are different for each user.
    no need to disple the standard  approval role in Process initiation.
    Custom role should be populated based on the selection from the first action.
    example: if the user need cash and he should select the cash need option from
                  first action then the finace approver should appear in next action.
                  if not it should not appear.
    please advice which GP callable object is best for this process.
    i have the plan to use the webdynpros..
    regards
    Sukumar

  • Risk Management in PS

    Hi everyone!
    Does anyone know if the there's any functionality in SAP to handle Risk Management?
    What the client needs to know is if SAP has any available tool to manage risks in project. When they are building up the solution for a client, they consider several risks that may arise. And during the execution of the project, they monitor those risks constantly. They can occurr or not, and sometimes other risks not detected can arise and have to be handled. Do you know if there's something in PS to address this?
    Thanks in advance!
    Regards,
    Thalos.

    Hi
    Yes, it is possible to handle risk management in SAP PS.
    Risk management need to consider the following:-
    a) Event: What could happen?
    b) Probability: How likely is it to happen?
    c) Impact: How bad will it be if it happens?
    d) Mitigation: How can you reduce the Probability (and by how much)?
    e) Contingency: How can you reduce the Impact (and by how much)?
    f) Reduction = Mitigation X Contingency
    g) Exposure = Risk u2013 Reduction
    Event you need to link with your network activities, means each activity you need to identify the risk involved.
    Probability and Impact of the risk should be recorded on each activity which can be done through user fields.
    For Mitigation and Contingency you can use DMS to maintain on each network activity.
    If any Risk/ event occurred on an activity which you can identify through user status, and reporting can be done through notification.
    If detailed mitigation plan need to be recorded you can record it through notification using class and charecteristics in order to record the values.
    Create a Query / Z report to analyse the risk.
    Tnx.
    Abdul

  • Performance Management Plan - Customization

    Hi
    This is regarding the Performance Management Plan in Oracle Performance Management. Currently my client uses a custom concurrent program which creates appraisals by calculating the job anniversary date. The client is using yearly appraisal. But the program is scheduled to run every two weeks and picks the teammates who have completed their job anniversary in that period and creates appraisals for them.
    There is no goal setting or tracking process implemented currently. The client is not using PMP now. I would like to propose PMP to the client. The PMP would create appraisals based on the hierarchy - Supervisor, supervisor Assgn, Position, Organization.
    If a teammate is hired on 01-jan-2008 the first appraisal should be in 01-jan-2009 as per the client req now. If PMP is used it would create an appraisal in the year 2008 itself-- which is wrong as per the client requirement. Is there an option in PMP to exclude him in the current PMP and include in the next year's PMP?.
    Thanks in advance
    Regards
    Ashish

    Hi,
    Using the PMP plan is ideal in case where the appraisal period is same across the organization. In organizations where the appraisal period differs depending on factors like hiredate, the PMP would be of a big maintenance. You will have to create PMP for each individual employee in the organization.
    I suggest instead use objective assessment also in your appraisals and not use the PMP.
    Thanks,

  • Enterprise Research Planning (ERP)  - Is it a typo ?

    I feel they meant <b>Enterprise Resource Planning (ERP)</b> not Enterprise Research Planning (ERP). What do you think about the name of this forum ?

    Sanjeev,
    Actually considering how long SAP implementations used to take, research planning is probably a better term sometimes for the use of the software.  Anyone remember the stories of the 12 month requirement gathering phases, without even looking at a system to see whether the software will support those requirements, and to further add without even having a sandbox/dev system up and running during that time.
    Then again maybe SAP decided to come out with a new product for the Business Suite.
    Take care,
    Stephen

  • Two questions about Risk Management 2.0

    hi experts,
    Please find below two questions about Risk Management:
    -In SPRO, Risk Management>Create top node: after completing information and executing I have this error:
    Error in the ABAP Application Program
    The current ABAP program "/ORM/ORM_CREATE_TOP_NODES" had to be terminated
    because it has
    come across a statement that unfortunately cannot be executed.
    The following syntax error occurred in program "/ORM/SAPLORM_API_SERVICES " in
    include "/ORM/LORM_API_SERVICESU10 " in
    line 97:
    "Bei PERFORM bzw. CALL FUNCTION "GET_ORGUNIT_THRESHOLDS" ist der Aktual"
    "parameter "I_ORGUNIT_ID" zum Formalparameter "IV_ORGUNIT_ID" inkompati"
    "bel."
    The include has been created and last changed by:
    Created by: "SAP "
    Last changed by: "SAP "
    Error in the ABAP Application Program
    The current ABAP program "/ORM/ORM_CREATE_TOP_NODES" had to be terminated
    because it has
    come across a statement that unfortunately cannot be executed.
    Do you know where it could come from?
    -On the Portal>Risk Management
    when I click in a link under the risk management menu(activities and risks, risk report, document risk,...) i alway have an internal server error:
    While processing the current request, an exception occured which could not be handled by the application or the framework.
    If the information contained on this page doesn't help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this error page. Hint: Most browsers allow to select all content, copy it and then paste it into an empty document (e.g. email or simple text file).
    Do we have to set up some customizing points before accessing these links?
    Thank you !
    Regards,
    Julien

    Hi Julien ,
    I have the same error what u described as :-
    -On the Portal>Risk Management
    when I click in a link under the risk management menu(activities and risks, risk report, document risk,...) i alway have an internal server error:
    While processing the current request, an exception occured which could not be handled by the application or the framework.
    If the information contained on this page doesn't help you to find and correct the cause of the problem, please contact your system administrator. To facilitate analysis of the problem, keep a copy of this error page. Hint: Most browsers allow to select all content, copy it and then paste it into an empty document (e.g. email or simple text file).
    Do we have to set up some customizing points before accessing these links?    "
    Are you able to solve this. Please let me know how to resolve this???
    Thanks
    Regards,
    Atul

  • How SAP Risk Management may be interfaced with SAP Strategy Management?

    Hello,
    Any document, any customer experience around integration between SAP BusinessObjects Strategy Management and SAP BusinessObjects Risk Management would be very appreciated.
    Best regards
    Jean-Luc

    Hi Renaud,
    where you able to create your webservice and use it from GRC RM?
    If yes, I would be interested in - 'How do i connect SAP RM 3.0 with that web service'
    Regards
    Holger

  • Managing planning time fence ( P1 MRP type ) and firm zone in ME32L

    Hello,
    I want to know if there is or are some documents to know how to manage planning time fence in MM02 and firm zone in ME32L ?
    For me, in ME32L the firm zone is the firmed quantities sent to suppliers but not firmed for MRP so how to manage this easily ?
    Thanks.
    Romeo.

    Dear,
    Firm ZOne in SA, says that that much qty will be procured from that vendor with in that date specified, if not taken the production cost and cost related to that will be paid.
    Now the planing time fence, is the time with in which no change is allowed. Hence if there is any new requirement to that RM, then it will be pushed to outside the time fence.
    Hence if there is a schedule line which is already there and requirement is coved with in that, then your requirement is met, if not system will create a new schedule line in the trade off zone/planning zone.
    I hope you got the point.

Maybe you are looking for