SAP GRC Upgrades

SAP’s Governance, Risk and Compliance (GRC) solutions typically release major version updates every 2-3 years and support packs approximately every quarter.

Winterhawk’s consultants have experience of GRC versions dating back to the early 2000s when GRC was owned by Virsa, before SAP acquired the company and technology; as a result our teams are experienced in updating and migrating data between minor and major version upgrades.

Whether it is major, minor or support pack GRC upgrades your organisation requires, Winterhawk supports a range of activities from technical expertise, business cases and cost benefit analysis through to designing a process roadmap which the business can benefit from in new upgrade functionality.

Winterhawk has developed GRC migration toolkits and frameworks to support GRC upgrades whilst retaining existing data, processes and workflows intact.


Here are a few examples of GRC upgrades Winterhawk has supported over the recent years:

SAP GRC 5.3 to 10.1 (Java to NetWeaver)
Migrated the existing Access Control ruleset, risk owners and workflows to the new major version of GRC. Integrated Access Control with Ariba to conduct Segregation of Duty checks across ECC 6.0 and Ariba.

SAP GRC 10.0 to 12.0 (Fiori)
Migrated existing GRC data and enabled Fiori tile functionality to strategically replace the NetWeaver Business Client. Implemented new Process Control Continuous Control Monitoring functionality to cater for regional business rule parameters and enabled the Risk Management Interactive Bow-tie Builder.

SAP GRC 10.1 SP14 to 10.1 SP17 (SuccessFactors Provisioning and Ruleset)
Upgraded existing GRC system to Support Pack 17 to enable native SuccessFactors integration and access the sample SuccessFactors Risk Analysis ruleset provided.

SAP GRC on hosted on an Oracle Database to a SAP HANA database
Migrated GRC from a decommissioned SAP ECC6.0 platform to a HANA cloud platform environment.

SAP Assurance and Compliance Suite (ACS) 1.0 to 1.4 for Audit Management
Retained historic Audit data (including audits, findings and reports), user approval workflows and content but enable the direct integration with SAP Process Control and Risk Management.

Approva BizRights to SAP GRC Access Control
Rapid Deployment migration from legacy BizRights (Infor) software to SAP GRC Access Control 12.0


Our Expertise

Using Winterhawk to support the upgrade of your SAP GRC system, you can expect the following expertise and deliverables to support the project:

  • Perform hardware sizing analysis to determine additional hardware costs
  • Review all functional and technical enhancements in the new version
  • Identify and scope the level of effort to incorporate relevant enhancements into the upgrade process
  • Prepare a detailed project plan with both internal and external resource allocations
  • Perform the technical upgrade
  • Perform the post upgrade configuration
  • Configure new functionality as required
  • Provide testing plans
  • Provide test scenarios
  • Provide user training materials
  • Deliver delta training courses to key stakeholders
  • Provide post implementation support

Get in touch

Winterhawk provides expert services for undertaking SAP GRC upgrades and efficiently migrate historic data using our upgrade toolkits.

Get in touch to enquire about our SAP GRC Upgrade service offerings.