If you ask yourselves these questions
How to face the regulatory constraints (SOA/SOX, LSF) ?
How to implement the solutions SAP GRC? Compliance Calibrator? Role Expert? Firefighter? Access Enforcer?
How to reduce development and maintenance costs?
How to industrialize the management of the roles, the users?
How to acquire and transfer knowledge in the company?
How in-house control risks of fraud?
Does your authorization design respect the SOD matrix?
Is the integrity of your system and your data guaranteed?
Are your confidential data well protected?
Is your authorizations design evolutionary? Is it easy to maintain?
Do your collaborators have too much extended or conflicting rights?