SAP Risk Management

SAP Risk Management supports financial, legal, IT, vendor, operational, and enterprise risk work. It links risks to business activities, owners, risk appetite, root causes, consequences, and mitigation plans. [SAP Risk Management](https://www.sap.com/products/financial-management/risk-management.html)

It supports both qualitative and quantitative analysis, including likelihood and impact assessments, scenario analysis, Monte Carlo simulations, and response planning. The system can then track incidents, losses, mitigation actions, and reporting results. [SAP Help](https://help.sap.com/docs/SAP_RISK_MANAGEMENT/51bbedc6646d4ff5b35b9d883be390a6/88e20c58b7b345e09f30e74e6eac04ff.html)

SAP documents real-time monitoring of application data from internal and external systems, including SAP HANA-based key risk indicators. The exact data connections and monitoring rules depend on the organization's SAP landscape and configuration. [SAP Risk Management](https://www.sap.com/products/financial-management/risk-management.html)

SAP Risk Management focuses on enterprise risk identification, assessment, response, and monitoring, while SAP Process Control focuses on documenting, testing, and monitoring internal controls. SAP Access Control is a separate GRC product for access and segregation-of-duties risks. [SAP GRC documentation](https://help.sap.com/docs/SAP_GRC)