基于SAP GRC+SoTower的全面风险管理与内部控制系统  

Design of the Information System for Comprehensive Risk Management and Internal Control Based on SAP GRC+So Tower

作　　者：王国娟[1] 陈金华[1] 方国[1] 

机构地区：[1]北京中电普华信息技术有限公司,北京100192

出　　处：《电力信息与通信技术》2014年第12期79-82,共4页Electric Power Information and Communication Technology

摘　　要：以国家电网公司全面风险管理与内部控制系统为例,介绍了基于SAP GRC+So Tower的总体架构,以及Net Weaver与So Tower 2个技术平台间的集成架构,以SAP GRC 10.0的核心产品模块为基础,并结合业务流程管理(BPM)等组件,支撑系统自身功能的实现。利用企业服务总线(ESB)与外部系统进行集成,通过与企业门户、目录服务的集成,实现了用户在企业门户中对全面风险管理与内部控制系统的统一访问。The case of the Information system for comprehensive risk management and internal control of State Grid Corporation of China is used to demonstrate the general architecture based on SAP GRC＋SoTower in this paper, and the integrated architecture between the platform of NetWeaver and SoTower also is introduced. The information system is implemented based on SAP GRC 10.0 module and combined with BPM and other components. The system can use the ESB to realize the integration with the other systems. Through the integration with enterprise portal and directory service, the enterprise portal user＇s unified access to the comprehensive risk management and internal control information system can be realized.

关 键 词：全面风险管理 体系结构 集成 部署 

分 类 号：TP315[自动化与计算机技术—计算机软件与理论]