---
title: "SAP GRC Risk Management: Risk Analysis"
description: Come gestire i rischi aziendali tramite l'uso del SAP GRC Risk Management?
image: https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/risk-Jun-14-2024-09-21-05-5425-AM.jpg
---

[linkedin](https://www.linkedin.com/company/292350?trk=vsrp_companies_res_name&trkInfo=VSRPsearchId%3A3373431891426179412478%2CVSRPtargetId%3A292350%2CVSRPcmpt%3Aprimary) [YouTube](https://www.youtube.com/c/AgleaSAPSecurity?sub_confirmation=1) [Twitter](https://twitter.com/AgleaItaly?lang=it)

[![Logo-Aglea-horsa-company](https://www.aglea.com/hubfs/Aglea/Aglea_November2018%20Theme/Images/Logo-Aglea-horsa-company.webp) ](https://www.aglea.com/)

# SAP GRC Risk Management: Risk Analysis

# SAP GRC Risk Management: Risk Analysis

Posted by [Massimo Manara](https://www.aglea.com/blog/author/massimo-manara) on Dec 8, 2021 12:00:00 AM

- [Tweet](https://twitter.com/share)

L'analisi dei rischi può essere svolta su diverse tematiche, non solo quelle legate agli accessi, quindi una Access Risk Analysis. 

![risk](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/risk-Jun-14-2024-09-21-05-5425-AM.jpg?width=525&name=risk-Jun-14-2024-09-21-05-5425-AM.jpg)

 

Ma come e perché svolgere una analisi dei rischi aziendali? Come SAP GRC Risk Management può essere utile alla tua azienda?

## Enterprise Risk Management cosa è? 

Esiste molta documentino a riguardo. Cercherò di farla più semplice del previsto. Acronimo ERM, significa sostanzialmente identificare, valutare, rispondere e controllare i rischi aziendali.

 

Sembrano passaggi facili, tuttavia, non è così semplice svolgere queste operazioni per svariate ragioni, ad esempio:

 

- Bisogna avere **una gestione**, se possibile, **centralizzata** di come gestire il rischio in azienda. Questo non significa che non sia possibile de-centralizzare. Qui intendiamo che il modello di gestione del rischio dovrebbe essere condiviso e ben definito. Evitando quindi che ogni dipartimento svolga analisi per contro proprio usando le proprie logiche non avendo un modello comune
- Richiede che una parte delle attività lavorative deve essere riservata per svolgere questo tipo di analisi
- Richiede se possibile di **utilizzare degli strumenti che rendono standard** i passaggi sopra definiti, appunto per avere un unico modello (basato sugli standard di riferimento presenti in letteratura, ad esempio la [ISO31000](https://it.wikipedia.org/wiki/ISO_31000))
- Gli standard definiti **semplificano la rappresentazione dei rischi aziendali**, per i vari attori che devono leggere e valutare quanto emerge dal sistema di gestione dei rischi aziendali

 

## Come effettui oggi l'analisi dei rischi aziendali?

Ogni azienda dovrebbe effettuare una valutazione dei rischi. In quanto ogni azienda può essere esposta in qualche modo.

 

Può sembrare strano in alcuni casi. A volte capita di sentire: "Non abbiamo bisogno di farla", "Non è mai capitato nulla di grave", "Cosa potrebbe capitare?"

 

Ecco, affermazioni di questo tipo sono i principali campanelli di allarme che dovrebbero proprio portare a svolgere una valutazione dei rischi (risk analysis). 

 

Qual è infatti la differenza tra una azienda che svolge queste valutazioni rispetto ad un'altra che non le svolge? Forse un esempio su tutti è particolarmente calzante:

 

- **Se non svolgi una analisi dei rischi**, quando capita qualcosa (di non previsto evidentemente) sei completamente impreparato nella maggior parte dei casi
- **Se svolgi una analisi dei rischi**, probabilmente, sei più preparato sui rischi che avevi ipotizzato e comunque in una situazione migliore rispetto ai rischi che non erano stati previsti o valutati

 

Pensiamo ad esempio alla situazione pandemica (covid-19). Difficile prevederla e metterla in agenda, anche se alcune società, se non con impatti simili, ci avevano in qualche modo pensato. O comunque le azioni di risposta a determinati rischi hanno alleggerito la gravità di questo rischio nei confronti dell'azienda stessa.

 

L'analisi del contesto, le valutazioni collaborative, possono essere un aiuto nell'identificazione dei rischi. Purtroppo, in molti casi queste avvengo in fogli elettronici, con tutti i limiti del caso:

- Non vi sono tracce di chi ha fatto cosa e come, oppure se qualcuno ha modificato anche involontariamente qualcosa
- La collaborazione non è così semplice tramite l'utilizzo di fogli di calcolo
- Non sono spesso definiti algoritmi formali di calcolo, oppure vengono modificati
- Diventa complicato allegare documentazione
- Non è sempre immediato avere delle reportistiche strutturate e fruibili in ogni momento
- Quanto sopra è maggiormente amplificato se le persone che operano su queste tematiche sono diverse

 

## SAP GRC Risk Management cosa è?

Si tratta di uno strumento della suite di SAP GRC - Governance Risk and Compliance. Dedicato alla gestione dei rischi aziendali. Come ti può aiutare?

 

Seguendo un processo di gestione del rischio basato sulle seguenti fasi:

- Pianificazione
- Identificazione
- Risk Analysis
- Risposta al rischio
- Conformità Continua ("Monitoraggio")

 

### Pianificazione (Planning)

 

Perché puoi strutturare tutte le entità definite dallo strumento e capire come modellare il tuo modello di gestione dei rischi. Definendo delle strutture organizzative, dei rischi appunto, delle opportunità, delle attività, per modellare gli oggetti che saranno usati per valutare i rischi.

 

### Identificazione (Risk Identification)

 

Puoi utilizzare questo strumento per effettuare delle Survey e identificare in ogni dipartimento quali siano i rischi aziendali, per poi censirli e definirli nello strumento stesso. Questi saranno gestiti centralmente o localmente.

 

### Analisi del rischio (Risk Analysis)

 

In questo caso sarò possibile svolgere una risk analysis per valutare l'esposizione al rischio. Tramite diverse modalità: quantitativa, qualitativa o score-based. Valutando quindi:

- Ineherent Risk
- Residual Risk
- Residual Risk (Planned)

 

ovvero rispettivamente il rischio senza alcuna mitigazione o risposta. Il rischio applicando la risposta o controllo, il target risk (Residual Risk planned) di riferimento. Ovvero a che altezza vuoi impostare l'asticella.

 

Nella seguente immagine è infatti possibile vedere una anagrafica del rischio per come è stata pensata. In particolare, nel tab Analysis è possibile vedere come è stata effettuata una risk analysis in base ai criteri sopra.

 

![Risk Financials Risk Analysis SAP GRC](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/Risk%20Financials%20Risk%20Analysis%20SAP%20GRC-Jun-14-2024-09-21-03-1626-AM.png?width=1930&name=Risk%20Financials%20Risk%20Analysis%20SAP%20GRC-Jun-14-2024-09-21-03-1626-AM.png)

 

Ogni rischio viene valutato in base agli impatti (Impacts, quali sono le conseguenze) e driver (cosa porta a quel rischio). La probabilità di accadimento e le perdite documentano l'esposizione attesa del rischio.

 

### Risk Response

 

Le contromisure (risposte o controlli) nel tab response permettono di andare a calcolare e tenere conto del residual risk

 

![Risk Financials Risk Response SAP GRC](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/Risk%20Financials%20Risk%20Response%20SAP%20GRC-Jun-14-2024-09-21-04-7202-AM.png?width=2033&name=Risk%20Financials%20Risk%20Response%20SAP%20GRC-Jun-14-2024-09-21-04-7202-AM.png)

 

In questo caso è possibile, inoltre, collegare due degli strumenti dell'area GRC ovvero il [SAP GRC Process Control](https://www.aglea.com/sap-grc) ed il SAP GRC Risk Management.

 

### Risk Monitoring

 

Infine, è possibile controllare la propria esposizione tramite l'utilizzo di reportistiche, tra cui la mappa di calore (HeatMap) dei rischi aziendali.

 

![Risk Financials Heat Map SAP GRC](https://www.aglea.com/hs-fs/hubfs/Aglea/Imported_Blog_Media/Risk%20Financials%20Heat%20Map%20SAP%20GRC-Jun-14-2024-09-21-03-8647-AM.png?width=2300&name=Risk%20Financials%20Heat%20Map%20SAP%20GRC-Jun-14-2024-09-21-03-8647-AM.png)

 

Sei interessato ad avere qualche informazione aggiuntiva su come questo strumento può supportare questo aspetto nella tua azienda? [Contattaci](https://www.aglea.com/contatti/)

 

 

 

 Topics: [ERM](https://www.aglea.com/blog/tag/erm), [sap grc rm](https://www.aglea.com/blog/tag/sap-grc-rm), [Enterprise risk management](https://www.aglea.com/blog/tag/enterprise-risk-management), [Risk Management](https://www.aglea.com/blog/tag/risk-management), [Gestione del rischio aziendale](https://www.aglea.com/blog/tag/gestione-del-rischio-aziendale)

### Iscriviti qui!

### Blog Aglea, cosa puoi trovare?

Ogni mercoledì pubblichiamo articoli, interviste e documenti relativi alla security SAP.

Cosa puoi trovare:

- Suggerimenti su come mettere in sicurezza i sistemi SAP
- Come fare a … (How To)
- Checklist
- Gli errori comuni che spesso vengono fatti in ambito Security SAP
- Interviste con esperti del settore
- Chi è AGLEA quale è la nostra vision security SAP

### Post recenti

### Post By Topic

- [SAP Security (32)](https://www.aglea.com/blog/tag/sap-security)
- [SAP GRC (24)](https://www.aglea.com/blog/tag/sap-grc)
- [audit sap (22)](https://www.aglea.com/blog/tag/audit-sap)
- [fiori launchpad (20)](https://www.aglea.com/blog/tag/fiori-launchpad)
- [pfcg (19)](https://www.aglea.com/blog/tag/pfcg)
- [authorization concept (18)](https://www.aglea.com/blog/tag/authorization-concept)
- [cyber security (18)](https://www.aglea.com/blog/tag/cyber-security)
- [SAP audit (17)](https://www.aglea.com/blog/tag/sap-audit)
- [audit (16)](https://www.aglea.com/blog/tag/audit)
- [gdpr (16)](https://www.aglea.com/blog/tag/gdpr)
- [sap cyber security (16)](https://www.aglea.com/blog/tag/sap-cyber-security)
- [auditing (15)](https://www.aglea.com/blog/tag/auditing)
- [sap security blog (14)](https://www.aglea.com/blog/tag/sap-security-blog)
- [supporto sap ams (14)](https://www.aglea.com/blog/tag/supporto-sap-ams)
- [PFCG SAP transaction (13)](https://www.aglea.com/blog/tag/pfcg-sap-transaction)
- [SAP Cloud (13)](https://www.aglea.com/blog/tag/sap-cloud)
- [sap FIORI (13)](https://www.aglea.com/blog/tag/sap-fiori)
- [libro SAP (12)](https://www.aglea.com/blog/tag/libro-sap)
- [sod (12)](https://www.aglea.com/blog/tag/sod)
- [SAP GDPR (11)](https://www.aglea.com/blog/tag/sap-gdpr)
- [sap password (11)](https://www.aglea.com/blog/tag/sap-password)
- [sap vulnerability (11)](https://www.aglea.com/blog/tag/sap-vulnerability)
- [SAP cloud identity services (10)](https://www.aglea.com/blog/tag/sap-cloud-identity-services)
- [Segregation of duties (10)](https://www.aglea.com/blog/tag/segregation-of-duties)
- [vulnerability assessment (10)](https://www.aglea.com/blog/tag/vulnerability-assessment)
- [sap btp (9)](https://www.aglea.com/blog/tag/sap-btp)
- [sap license auditing (9)](https://www.aglea.com/blog/tag/sap-license-auditing)
- [SAP Cloud Security (8)](https://www.aglea.com/blog/tag/sap-cloud-security)
- [SAP FIORI Security (8)](https://www.aglea.com/blog/tag/sap-fiori-security)
- [SAP HR (8)](https://www.aglea.com/blog/tag/sap-hr)
- [consulenza sap security (8)](https://www.aglea.com/blog/tag/consulenza-sap-security)
- [idm (8)](https://www.aglea.com/blog/tag/idm)
- [secure coding sap (8)](https://www.aglea.com/blog/tag/secure-coding-sap)
- [security audit log (8)](https://www.aglea.com/blog/tag/security-audit-log)
- [siem (8)](https://www.aglea.com/blog/tag/siem)
- [threat detection (8)](https://www.aglea.com/blog/tag/threat-detection)
- [upgrade (8)](https://www.aglea.com/blog/tag/upgrade)
- [FIORI Security (7)](https://www.aglea.com/blog/tag/fiori-security)
- [S/4HANA (7)](https://www.aglea.com/blog/tag/s-4hana)
- [SAP IAG (7)](https://www.aglea.com/blog/tag/sap-iag)
- [SAP LOG (7)](https://www.aglea.com/blog/tag/sap-log)
- [User Access Management (7)](https://www.aglea.com/blog/tag/user-access-management)
- [governance (7)](https://www.aglea.com/blog/tag/governance)
- [internal audit (7)](https://www.aglea.com/blog/tag/internal-audit)
- [sap consulenza security (7)](https://www.aglea.com/blog/tag/sap-consulenza-security)
- [sap fiori space (7)](https://www.aglea.com/blog/tag/sap-fiori-space)
- [sap grc 12 (7)](https://www.aglea.com/blog/tag/sap-grc-12)
- [security ams (7)](https://www.aglea.com/blog/tag/security-ams)
- [su53 (7)](https://www.aglea.com/blog/tag/su53)
- [HANA Security (6)](https://www.aglea.com/blog/tag/hana-security)
- [SAP ECC (6)](https://www.aglea.com/blog/tag/sap-ecc)
- [autorizzazioni sap (6)](https://www.aglea.com/blog/tag/autorizzazioni-sap)
- [identity management system (6)](https://www.aglea.com/blog/tag/identity-management-system)
- [sap patch (6)](https://www.aglea.com/blog/tag/sap-patch)
- [ISO (5)](https://www.aglea.com/blog/tag/iso)
- [SAP Identity and Access Governance (5)](https://www.aglea.com/blog/tag/sap-identity-and-access-governance)
- [SU01 sap (5)](https://www.aglea.com/blog/tag/su01-sap)
- [access management (5)](https://www.aglea.com/blog/tag/access-management)
- [authorization model (5)](https://www.aglea.com/blog/tag/authorization-model)
- [controlli interni (5)](https://www.aglea.com/blog/tag/controlli-interni)
- [cyber security culture (5)](https://www.aglea.com/blog/tag/cyber-security-culture)
- [data loss prevention (5)](https://www.aglea.com/blog/tag/data-loss-prevention)
- [documentazione sap security (5)](https://www.aglea.com/blog/tag/documentazione-sap-security)
- [log sap (5)](https://www.aglea.com/blog/tag/log-sap)
- [oggetti autorizzativi critici (5)](https://www.aglea.com/blog/tag/oggetti-autorizzativi-critici)
- [rfc security (5)](https://www.aglea.com/blog/tag/rfc-security)
- [ruoli (5)](https://www.aglea.com/blog/tag/ruoli)
- [sap authorization review (5)](https://www.aglea.com/blog/tag/sap-authorization-review)
- [sap fue (5)](https://www.aglea.com/blog/tag/sap-fue)
- [sap_all (5)](https://www.aglea.com/blog/tag/sap_all)
- [securitybridge (5)](https://www.aglea.com/blog/tag/securitybridge)
- [sicurezza sap (5)](https://www.aglea.com/blog/tag/sicurezza-sap)
- [sviluppo codice sicuro (5)](https://www.aglea.com/blog/tag/sviluppo-codice-sicuro)
- [userid (5)](https://www.aglea.com/blog/tag/userid)
- [IAG (4)](https://www.aglea.com/blog/tag/iag)
- [RISE with SAP (4)](https://www.aglea.com/blog/tag/rise-with-sap)
- [SAP IDM (4)](https://www.aglea.com/blog/tag/sap-idm)
- [aglea (4)](https://www.aglea.com/blog/tag/aglea)
- [code vulnerability analysis (4)](https://www.aglea.com/blog/tag/code-vulnerability-analysis)
- [data privacy (4)](https://www.aglea.com/blog/tag/data-privacy)
- [fraud management (4)](https://www.aglea.com/blog/tag/fraud-management)
- [itgc (4)](https://www.aglea.com/blog/tag/itgc)
- [microsoft (4)](https://www.aglea.com/blog/tag/microsoft)
- [patch (4)](https://www.aglea.com/blog/tag/patch)
- [sap data masking (4)](https://www.aglea.com/blog/tag/sap-data-masking)
- [sap gui (4)](https://www.aglea.com/blog/tag/sap-gui)
- [sap gui security (4)](https://www.aglea.com/blog/tag/sap-gui-security)
- [sap hana (4)](https://www.aglea.com/blog/tag/sap-hana)
- [sap logon (4)](https://www.aglea.com/blog/tag/sap-logon)
- [sap super user (4)](https://www.aglea.com/blog/tag/sap-super-user)
- [security awareness (4)](https://www.aglea.com/blog/tag/security-awareness)
- [test system (4)](https://www.aglea.com/blog/tag/test-system)
- [workflow security SAP (4)](https://www.aglea.com/blog/tag/workflow-security-sap)
- [AI (3)](https://www.aglea.com/blog/tag/ai)
- [HANA (3)](https://www.aglea.com/blog/tag/hana)
- [RISE (3)](https://www.aglea.com/blog/tag/rise)
- [Risk Management (3)](https://www.aglea.com/blog/tag/risk-management)
- [SAP AUDIT LOG (3)](https://www.aglea.com/blog/tag/sap-audit-log)
- [SAP NOW (3)](https://www.aglea.com/blog/tag/sap-now)
- [Single Sing On (3)](https://www.aglea.com/blog/tag/single-sing-on)
- [UCON (3)](https://www.aglea.com/blog/tag/ucon)
- [UI logging (3)](https://www.aglea.com/blog/tag/ui-logging)
- [amministratore di sistema (3)](https://www.aglea.com/blog/tag/amministratore-di-sistema)
- [cloud platform (3)](https://www.aglea.com/blog/tag/cloud-platform)
- [consulenti (3)](https://www.aglea.com/blog/tag/consulenti)
- [consulenti sap security (3)](https://www.aglea.com/blog/tag/consulenti-sap-security)
- [corsi sap (3)](https://www.aglea.com/blog/tag/corsi-sap)
- [crittografia SAP (3)](https://www.aglea.com/blog/tag/crittografia-sap)
- [e-learning (3)](https://www.aglea.com/blog/tag/e-learning)
- [emergency users (3)](https://www.aglea.com/blog/tag/emergency-users)
- [formazione sap (3)](https://www.aglea.com/blog/tag/formazione-sap)
- [mail security sap (3)](https://www.aglea.com/blog/tag/mail-security-sap)
- [manuali sap security (3)](https://www.aglea.com/blog/tag/manuali-sap-security)
- [password policy (3)](https://www.aglea.com/blog/tag/password-policy)
- [process control (3)](https://www.aglea.com/blog/tag/process-control)
- [process mining (3)](https://www.aglea.com/blog/tag/process-mining)
- [processi security (3)](https://www.aglea.com/blog/tag/processi-security)
- [profili sap (3)](https://www.aglea.com/blog/tag/profili-sap)
- [reporting (3)](https://www.aglea.com/blog/tag/reporting)
- [rfc (3)](https://www.aglea.com/blog/tag/rfc)
- [rpa sap security (3)](https://www.aglea.com/blog/tag/rpa-sap-security)
- [sap compliance (3)](https://www.aglea.com/blog/tag/sap-compliance)
- [sap custom (3)](https://www.aglea.com/blog/tag/sap-custom)
- [sap data obfuscation (3)](https://www.aglea.com/blog/tag/sap-data-obfuscation)
- [sap dati personali (3)](https://www.aglea.com/blog/tag/sap-dati-personali)
- [sap ias (3)](https://www.aglea.com/blog/tag/sap-ias)
- [sap mail (3)](https://www.aglea.com/blog/tag/sap-mail)
- [sap siem (3)](https://www.aglea.com/blog/tag/sap-siem)
- [sap sso (3)](https://www.aglea.com/blog/tag/sap-sso)
- [sap training (3)](https://www.aglea.com/blog/tag/sap-training)
- [se16 (3)](https://www.aglea.com/blog/tag/se16)
- [sicurezza dei dati sap (3)](https://www.aglea.com/blog/tag/sicurezza-dei-dati-sap)
- [su25 (3)](https://www.aglea.com/blog/tag/su25)
- [suim (3)](https://www.aglea.com/blog/tag/suim)
- [ticket management system (3)](https://www.aglea.com/blog/tag/ticket-management-system)
- [training (3)](https://www.aglea.com/blog/tag/training)
- [transazioni sap (3)](https://www.aglea.com/blog/tag/transazioni-sap)
- [zero trust security (3)](https://www.aglea.com/blog/tag/zero-trust-security)
- [27001 (2)](https://www.aglea.com/blog/tag/27001)
- [NIS2 (2)](https://www.aglea.com/blog/tag/nis2)
- [SAP GRC Process Control (2)](https://www.aglea.com/blog/tag/sap-grc-process-control)
- [SAP Gateway security (2)](https://www.aglea.com/blog/tag/sap-gateway-security)
- [Trace autorizzazioni SAP (2)](https://www.aglea.com/blog/tag/trace-autorizzazioni-sap)
- [UI Masking (2)](https://www.aglea.com/blog/tag/ui-masking)
- [agleasapsecurity (2)](https://www.aglea.com/blog/tag/agleasapsecurity)
- [ams (2)](https://www.aglea.com/blog/tag/ams)
- [corso (2)](https://www.aglea.com/blog/tag/corso)
- [custom (2)](https://www.aglea.com/blog/tag/custom)
- [cyber security exposure (2)](https://www.aglea.com/blog/tag/cyber-security-exposure)
- [epi-use (2)](https://www.aglea.com/blog/tag/epi-use)
- [eventi (2)](https://www.aglea.com/blog/tag/eventi)
- [gxp (2)](https://www.aglea.com/blog/tag/gxp)
- [intelligenza artificiale (2)](https://www.aglea.com/blog/tag/intelligenza-artificiale)
- [joule (2)](https://www.aglea.com/blog/tag/joule)
- [organizzazione (2)](https://www.aglea.com/blog/tag/organizzazione)
- [profili (2)](https://www.aglea.com/blog/tag/profili)
- [progetti sap security (2)](https://www.aglea.com/blog/tag/progetti-sap-security)
- [programmazione sicura (2)](https://www.aglea.com/blog/tag/programmazione-sicura)
- [quality (2)](https://www.aglea.com/blog/tag/quality)
- [quotazione borsa (2)](https://www.aglea.com/blog/tag/quotazione-borsa)
- [s_tabu_dis (2)](https://www.aglea.com/blog/tag/s_tabu_dis)
- [sap business role (2)](https://www.aglea.com/blog/tag/sap-business-role)
- [sap catalog (2)](https://www.aglea.com/blog/tag/sap-catalog)
- [sap data protection (2)](https://www.aglea.com/blog/tag/sap-data-protection)
- [sap developer (2)](https://www.aglea.com/blog/tag/sap-developer)
- [sap enterprise threat detection (2)](https://www.aglea.com/blog/tag/sap-enterprise-threat-detection)
- [sap etd (2)](https://www.aglea.com/blog/tag/sap-etd)
- [sap gxp compliance (2)](https://www.aglea.com/blog/tag/sap-gxp-compliance)
- [sap ilm (2)](https://www.aglea.com/blog/tag/sap-ilm)
- [sap italia (2)](https://www.aglea.com/blog/tag/sap-italia)
- [sap menu (2)](https://www.aglea.com/blog/tag/sap-menu)
- [sap query (2)](https://www.aglea.com/blog/tag/sap-query)
- [sap router security (2)](https://www.aglea.com/blog/tag/sap-router-security)
- [sap security guidelines (2)](https://www.aglea.com/blog/tag/sap-security-guidelines)
- [sap security note (2)](https://www.aglea.com/blog/tag/sap-security-note)
- [sap security partner (2)](https://www.aglea.com/blog/tag/sap-security-partner)
- [sap security patch day (2)](https://www.aglea.com/blog/tag/sap-security-patch-day)
- [sap security tools (2)](https://www.aglea.com/blog/tag/sap-security-tools)
- [sap security video (2)](https://www.aglea.com/blog/tag/sap-security-video)
- [sap sos (2)](https://www.aglea.com/blog/tag/sap-sos)
- [sap workflow (2)](https://www.aglea.com/blog/tag/sap-workflow)
- [se16n (2)](https://www.aglea.com/blog/tag/se16n)
- [secure operation map (2)](https://www.aglea.com/blog/tag/secure-operation-map)
- [slaw (2)](https://www.aglea.com/blog/tag/slaw)
- [smartworking (2)](https://www.aglea.com/blog/tag/smartworking)
- [soar (2)](https://www.aglea.com/blog/tag/soar)
- [social engineering (2)](https://www.aglea.com/blog/tag/social-engineering)
- [solution manager (2)](https://www.aglea.com/blog/tag/solution-manager)
- [success Factors (2)](https://www.aglea.com/blog/tag/success-factors)
- [super utenti sap (2)](https://www.aglea.com/blog/tag/super-utenti-sap)
- [system users (2)](https://www.aglea.com/blog/tag/system-users)
- [tabelle (2)](https://www.aglea.com/blog/tag/tabelle)
- [trasformazione digitale (2)](https://www.aglea.com/blog/tag/trasformazione-digitale)
- [usmm (2)](https://www.aglea.com/blog/tag/usmm)
- [youtube aglea (2)](https://www.aglea.com/blog/tag/youtube-aglea)
- [youtube sap (2)](https://www.aglea.com/blog/tag/youtube-sap)
- [10bklaze (1)](https://www.aglea.com/blog/tag/10bklaze)
- [20000 (1)](https://www.aglea.com/blog/tag/20000)
- [312 (1)](https://www.aglea.com/blog/tag/312)
- [9001 (1)](https://www.aglea.com/blog/tag/9001)
- [ABAP (1)](https://www.aglea.com/blog/tag/abap)
- [Barcellona (1)](https://www.aglea.com/blog/tag/barcellona)
- [CIAM (1)](https://www.aglea.com/blog/tag/ciam)
- [CSR (1)](https://www.aglea.com/blog/tag/csr)
- [CVA (1)](https://www.aglea.com/blog/tag/cva)
- [CVE-2021-44228 (1)](https://www.aglea.com/blog/tag/cve-2021-44228)
- [Cloud ALM (1)](https://www.aglea.com/blog/tag/cloud-alm)
- [DPO (1)](https://www.aglea.com/blog/tag/dpo)
- [ERM (1)](https://www.aglea.com/blog/tag/erm)
- [Enterprise risk management (1)](https://www.aglea.com/blog/tag/enterprise-risk-management)
- [GROW (1)](https://www.aglea.com/blog/tag/grow)
- [Gestione del rischio aziendale (1)](https://www.aglea.com/blog/tag/gestione-del-rischio-aziendale)
- [HANA Roles (1)](https://www.aglea.com/blog/tag/hana-roles)
- [HR Data Reporting (1)](https://www.aglea.com/blog/tag/hr-data-reporting)
- [IAS (1)](https://www.aglea.com/blog/tag/ias)
- [IPS (1)](https://www.aglea.com/blog/tag/ips)
- [Liste distribuzione SAP (1)](https://www.aglea.com/blog/tag/liste-distribuzione-sap)
- [Log4Shell SAP (1)](https://www.aglea.com/blog/tag/log4shell-sap)
- [Milano (1)](https://www.aglea.com/blog/tag/milano)
- [OKR (1)](https://www.aglea.com/blog/tag/okr)
- [Onboarding (1)](https://www.aglea.com/blog/tag/onboarding)
- [P-user (1)](https://www.aglea.com/blog/tag/p-user)
- [Portale SAP note (1)](https://www.aglea.com/blog/tag/portale-sap-note)
- [Privilege Access Management (1)](https://www.aglea.com/blog/tag/privilege-access-management)
- [S-user (1)](https://www.aglea.com/blog/tag/s-user)
- [SAP ABAC (1)](https://www.aglea.com/blog/tag/sap-abac)
- [SAP Assurance and Compliance Software (1)](https://www.aglea.com/blog/tag/sap-assurance-and-compliance-software)
- [SAP C4C (1)](https://www.aglea.com/blog/tag/sap-c4c)
- [SAP DAM (1)](https://www.aglea.com/blog/tag/sap-dam)
- [SAP DLP (1)](https://www.aglea.com/blog/tag/sap-dlp)
- [SAP DRM (1)](https://www.aglea.com/blog/tag/sap-drm)
- [SAP ERP cloud private (1)](https://www.aglea.com/blog/tag/sap-erp-cloud-private)
- [SAP FKOM (1)](https://www.aglea.com/blog/tag/sap-fkom)
- [SAP Fraud Management (1)](https://www.aglea.com/blog/tag/sap-fraud-management)
- [SAP RBAC (1)](https://www.aglea.com/blog/tag/sap-rbac)
- [SAP RECON (1)](https://www.aglea.com/blog/tag/sap-recon)
- [SAP Sales (1)](https://www.aglea.com/blog/tag/sap-sales)
- [SAP Table (1)](https://www.aglea.com/blog/tag/sap-table)
- [SECURITY PATTERN ANALYSIS (1)](https://www.aglea.com/blog/tag/security-pattern-analysis)
- [SLA (1)](https://www.aglea.com/blog/tag/sla)
- [SOX (1)](https://www.aglea.com/blog/tag/sox)
- [SPOOL (1)](https://www.aglea.com/blog/tag/spool)
- [ST01 (1)](https://www.aglea.com/blog/tag/st01)
- [STAUTHTRACE (1)](https://www.aglea.com/blog/tag/stauthtrace)
- [Statistiche security SAP (1)](https://www.aglea.com/blog/tag/statistiche-security-sap)
- [admin (1)](https://www.aglea.com/blog/tag/admin)
- [aglea tribe (1)](https://www.aglea.com/blog/tag/aglea-tribe)
- [analisi dei rischi (1)](https://www.aglea.com/blog/tag/analisi-dei-rischi)
- [azure (1)](https://www.aglea.com/blog/tag/azure)
- [backup (1)](https://www.aglea.com/blog/tag/backup)
- [biolock sap (1)](https://www.aglea.com/blog/tag/biolock-sap)
- [biometria (1)](https://www.aglea.com/blog/tag/biometria)
- [blacklist sap (1)](https://www.aglea.com/blog/tag/blacklist-sap)
- [bot (1)](https://www.aglea.com/blog/tag/bot)
- [brand (1)](https://www.aglea.com/blog/tag/brand)
- [certificazioni sap (1)](https://www.aglea.com/blog/tag/certificazioni-sap)
- [chatGPT (1)](https://www.aglea.com/blog/tag/chatgpt)
- [ciso (1)](https://www.aglea.com/blog/tag/ciso)
- [cloud connector (1)](https://www.aglea.com/blog/tag/cloud-connector)
- [codice sicuro SAP (1)](https://www.aglea.com/blog/tag/codice-sicuro-sap)
- [compatibility packs (1)](https://www.aglea.com/blog/tag/compatibility-packs)
- [continuità del servizio (1)](https://www.aglea.com/blog/tag/continuità-del-servizio)
- [customization sap (1)](https://www.aglea.com/blog/tag/customization-sap)
- [cyber security deception (1)](https://www.aglea.com/blog/tag/cyber-security-deception)
- [data access subject request (1)](https://www.aglea.com/blog/tag/data-access-subject-request)
- [data subject request gdpr (1)](https://www.aglea.com/blog/tag/data-subject-request-gdpr)
- [delete user (1)](https://www.aglea.com/blog/tag/delete-user)
- [developer (1)](https://www.aglea.com/blog/tag/developer)
- [documentazione SAP GRC (1)](https://www.aglea.com/blog/tag/documentazione-sap-grc)
- [documentazione di progetto (1)](https://www.aglea.com/blog/tag/documentazione-di-progetto)
- [dsr (1)](https://www.aglea.com/blog/tag/dsr)
- [dynamic authorization management (1)](https://www.aglea.com/blog/tag/dynamic-authorization-management)
- [esg (1)](https://www.aglea.com/blog/tag/esg)
- [esterni (1)](https://www.aglea.com/blog/tag/esterni)
- [exchange rates (1)](https://www.aglea.com/blog/tag/exchange-rates)
- [external users management (1)](https://www.aglea.com/blog/tag/external-users-management)
- [falsi positivi (1)](https://www.aglea.com/blog/tag/falsi-positivi)
- [feedback (1)](https://www.aglea.com/blog/tag/feedback)
- [firefighter (1)](https://www.aglea.com/blog/tag/firefighter)
- [firefighter HANA (1)](https://www.aglea.com/blog/tag/firefighter-hana)
- [flash (1)](https://www.aglea.com/blog/tag/flash)
- [fornitori sap (1)](https://www.aglea.com/blog/tag/fornitori-sap)
- [ftp (1)](https://www.aglea.com/blog/tag/ftp)
- [go-live (1)](https://www.aglea.com/blog/tag/go-live)
- [grc ram (1)](https://www.aglea.com/blog/tag/grc-ram)
- [handover autorizzazioni (1)](https://www.aglea.com/blog/tag/handover-autorizzazioni)
- [hardening (1)](https://www.aglea.com/blog/tag/hardening)
- [horsa (1)](https://www.aglea.com/blog/tag/horsa)
- [integrazioni sap (1)](https://www.aglea.com/blog/tag/integrazioni-sap)
- [intune (1)](https://www.aglea.com/blog/tag/intune)
- [lavoro agile (1)](https://www.aglea.com/blog/tag/lavoro-agile)
- [libri (1)](https://www.aglea.com/blog/tag/libri)
- [malware (1)](https://www.aglea.com/blog/tag/malware)
- [mandanti (1)](https://www.aglea.com/blog/tag/mandanti)
- [metodologia sap activate (1)](https://www.aglea.com/blog/tag/metodologia-sap-activate)
- [microsoft planner (1)](https://www.aglea.com/blog/tag/microsoft-planner)
- [microsoft stream (1)](https://www.aglea.com/blog/tag/microsoft-stream)
- [multicompany sap security (1)](https://www.aglea.com/blog/tag/multicompany-sap-security)
- [multiple logon (1)](https://www.aglea.com/blog/tag/multiple-logon)
- [naming convention (1)](https://www.aglea.com/blog/tag/naming-convention)
- [nist (1)](https://www.aglea.com/blog/tag/nist)
- [nuovi assunti (1)](https://www.aglea.com/blog/tag/nuovi-assunti)
- [ob08 (1)](https://www.aglea.com/blog/tag/ob08)
- [pa20 (1)](https://www.aglea.com/blog/tag/pa20)
- [parameter sap (1)](https://www.aglea.com/blog/tag/parameter-sap)
- [partner sap (1)](https://www.aglea.com/blog/tag/partner-sap)
- [pfud (1)](https://www.aglea.com/blog/tag/pfud)
- [podcast sap security (1)](https://www.aglea.com/blog/tag/podcast-sap-security)
- [postmand sap api (1)](https://www.aglea.com/blog/tag/postmand-sap-api)
- [progetti security sap (1)](https://www.aglea.com/blog/tag/progetti-security-sap)
- [quantum (1)](https://www.aglea.com/blog/tag/quantum)
- [remediation (1)](https://www.aglea.com/blog/tag/remediation)
- [remote access (1)](https://www.aglea.com/blog/tag/remote-access)
- [rfc destination (1)](https://www.aglea.com/blog/tag/rfc-destination)
- [risorse umane (1)](https://www.aglea.com/blog/tag/risorse-umane)
- [role transport (1)](https://www.aglea.com/blog/tag/role-transport)
- [s_tabu_nam (1)](https://www.aglea.com/blog/tag/s_tabu_nam)
- [s_tabu_rfc (1)](https://www.aglea.com/blog/tag/s_tabu_rfc)
- [sailpoint (1)](https://www.aglea.com/blog/tag/sailpoint)
- [sap TechEd (1)](https://www.aglea.com/blog/tag/sap-teched)
- [sap access control (1)](https://www.aglea.com/blog/tag/sap-access-control)
- [sap acronimi (1)](https://www.aglea.com/blog/tag/sap-acronimi)
- [sap activate (1)](https://www.aglea.com/blog/tag/sap-activate)
- [sap add on (1)](https://www.aglea.com/blog/tag/sap-add-on)
- [sap antivirus (1)](https://www.aglea.com/blog/tag/sap-antivirus)
- [sap asap (1)](https://www.aglea.com/blog/tag/sap-asap)
- [sap assure (1)](https://www.aglea.com/blog/tag/sap-assure)
- [sap backup (1)](https://www.aglea.com/blog/tag/sap-backup)
- [sap bis (1)](https://www.aglea.com/blog/tag/sap-bis)
- [sap business continuity (1)](https://www.aglea.com/blog/tag/sap-business-continuity)
- [sap business integrity screening (1)](https://www.aglea.com/blog/tag/sap-business-integrity-screening)
- [sap business partner (1)](https://www.aglea.com/blog/tag/sap-business-partner)
- [sap bw (1)](https://www.aglea.com/blog/tag/sap-bw)
- [sap covid (1)](https://www.aglea.com/blog/tag/sap-covid)
- [sap cua (1)](https://www.aglea.com/blog/tag/sap-cua)
- [sap cva (1)](https://www.aglea.com/blog/tag/sap-cva)
- [sap earlywatch (1)](https://www.aglea.com/blog/tag/sap-earlywatch)
- [sap frodi (1)](https://www.aglea.com/blog/tag/sap-frodi)
- [sap gamification (1)](https://www.aglea.com/blog/tag/sap-gamification)
- [sap grc app (1)](https://www.aglea.com/blog/tag/sap-grc-app)
- [sap grc fiori (1)](https://www.aglea.com/blog/tag/sap-grc-fiori)
- [sap grc rm (1)](https://www.aglea.com/blog/tag/sap-grc-rm)
- [sap grc tables (1)](https://www.aglea.com/blog/tag/sap-grc-tables)
- [sap gui history (1)](https://www.aglea.com/blog/tag/sap-gui-history)
- [sap ilm gdpr (1)](https://www.aglea.com/blog/tag/sap-ilm-gdpr)
- [sap ips (1)](https://www.aglea.com/blog/tag/sap-ips)
- [sap masking (1)](https://www.aglea.com/blog/tag/sap-masking)
- [sap penetration test (1)](https://www.aglea.com/blog/tag/sap-penetration-test)
- [sap personalization (1)](https://www.aglea.com/blog/tag/sap-personalization)
- [sap roll out (1)](https://www.aglea.com/blog/tag/sap-roll-out)
- [sap scp logon (1)](https://www.aglea.com/blog/tag/sap-scp-logon)
- [sap security MEME (1)](https://www.aglea.com/blog/tag/sap-security-meme)
- [sap security checklist (1)](https://www.aglea.com/blog/tag/sap-security-checklist)
- [sap security integrator (1)](https://www.aglea.com/blog/tag/sap-security-integrator)
- [sap security teal (1)](https://www.aglea.com/blog/tag/sap-security-teal)
- [sap signavio (1)](https://www.aglea.com/blog/tag/sap-signavio)
- [sap splunk (1)](https://www.aglea.com/blog/tag/sap-splunk)
- [sap standard role (1)](https://www.aglea.com/blog/tag/sap-standard-role)
- [sap support package (1)](https://www.aglea.com/blog/tag/sap-support-package)
- [sap tabelle custom (1)](https://www.aglea.com/blog/tag/sap-tabelle-custom)
- [sap tdms (1)](https://www.aglea.com/blog/tag/sap-tdms)
- [sap tipo utente (1)](https://www.aglea.com/blog/tag/sap-tipo-utente)
- [sap translate (1)](https://www.aglea.com/blog/tag/sap-translate)
- [sap_all_only_view (1)](https://www.aglea.com/blog/tag/sap_all_only_view)
- [sap_gui (1)](https://www.aglea.com/blog/tag/sap_gui)
- [sap_new (1)](https://www.aglea.com/blog/tag/sap_new)
- [scc4 (1)](https://www.aglea.com/blog/tag/scc4)
- [scoodo log (1)](https://www.aglea.com/blog/tag/scoodo-log)
- [scrambling (1)](https://www.aglea.com/blog/tag/scrambling)
- [scrum sap (1)](https://www.aglea.com/blog/tag/scrum-sap)
- [secpol (1)](https://www.aglea.com/blog/tag/secpol)
- [security bridge (1)](https://www.aglea.com/blog/tag/security-bridge)
- [security operation center (1)](https://www.aglea.com/blog/tag/security-operation-center)
- [security template (1)](https://www.aglea.com/blog/tag/security-template)
- [security tools (1)](https://www.aglea.com/blog/tag/security-tools)
- [security weaver (1)](https://www.aglea.com/blog/tag/security-weaver)
- [self service (1)](https://www.aglea.com/blog/tag/self-service)
- [semplificare (1)](https://www.aglea.com/blog/tag/semplificare)
- [sentinel (1)](https://www.aglea.com/blog/tag/sentinel)
- [sicurezza codice ABAP (1)](https://www.aglea.com/blog/tag/sicurezza-codice-abap)
- [sicurezza dati (1)](https://www.aglea.com/blog/tag/sicurezza-dati)
- [sistema integrato (1)](https://www.aglea.com/blog/tag/sistema-integrato)
- [sod ruleset (1)](https://www.aglea.com/blog/tag/sod-ruleset)
- [sondaggi (1)](https://www.aglea.com/blog/tag/sondaggi)
- [sost (1)](https://www.aglea.com/blog/tag/sost)
- [sql (1)](https://www.aglea.com/blog/tag/sql)
- [sticker (1)](https://www.aglea.com/blog/tag/sticker)
- [su21 (1)](https://www.aglea.com/blog/tag/su21)
- [system integrator (1)](https://www.aglea.com/blog/tag/system-integrator)
- [tabelle SAP grc access control (1)](https://www.aglea.com/blog/tag/tabelle-sap-grc-access-control)
- [tassi di cambio (1)](https://www.aglea.com/blog/tag/tassi-di-cambio)
- [test autorizzazioni (1)](https://www.aglea.com/blog/tag/test-autorizzazioni)
- [traduzione ruoli (1)](https://www.aglea.com/blog/tag/traduzione-ruoli)
- [traduzione sap (1)](https://www.aglea.com/blog/tag/traduzione-sap)
- [ust04 (1)](https://www.aglea.com/blog/tag/ust04)
- [utenti sap (1)](https://www.aglea.com/blog/tag/utenti-sap)
- [utenze di sistema (1)](https://www.aglea.com/blog/tag/utenze-di-sistema)
- [virtual forge (1)](https://www.aglea.com/blog/tag/virtual-forge)
- [vpn (1)](https://www.aglea.com/blog/tag/vpn)
- [xiting (1)](https://www.aglea.com/blog/tag/xiting)

[Visualizza tutti](https://www.aglea.com/blog/sap-grc-risk-management-risk-analysis#)

## [SAP Security Blog AGLEA RSS Feed](https://www.aglea.com/blog/rss.xml)

Aglea s.r.l. - Soggetta alla direzione e coordinamento di Horsa S.p.A. - P. IVA: IT 03868780960 - 2026 | [Privacy Policy](https://www.aglea.com/privacy-policy/) - [Cookie Policy](https://www.aglea.com/cookie-policy) - [Whistleblowing](https://whistleblowing.horsa.it/)

```json
{
  "@context" : "https://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Massimo Manara",
    "url" : "https://www.aglea.com/blog/author/massimo-manara"
  },
  "dateModified" : "2024-06-14T09:25:39.463Z",
  "datePublished" : "2021-12-07T23:00:00.000Z",
  "headline" : "SAP GRC Risk Management: Risk Analysis",
  "image" : [ "https://www.aglea.com/hubfs/Aglea/Imported_Blog_Media/risk-Jun-14-2024-09-21-05-5425-AM.jpg" ],
  "mainEntityOfPage" : {
    "@id" : "https://www.aglea.com/blog/sap-grc-risk-management-risk-analysis",
    "@type" : "WebPage"
  },
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject"
    },
    "name" : "Horsa S.p.A."
  }
}
```