Home / Current Issue / Paper 1722452
Digital Transformation of Financial Risk Management: The Role of SAP Analytics and GRC Systems in Saudi Enterprises
Subject area: Science,Engineering and Technology · Area of research: SAP Analytics and GRC Systems
DOI: https://doi.org/10.64388/IREV10I2-1722452
Abstract
Saudi Arabia's Vision 2030 agenda — through the Financial Sector Development Program, the National Transformation Program's digital-government mandate, and the Kingdom's broader economic diversification and privatization drive — is the direct catalyst pushing large enterprises to rebuild financial risk management on a digital foundation. This article examines how SAP Analytics (Analytics Cloud, embedded BI, and predictive modules) and SAP Governance, Risk and Compliance (GRC) applications are being combined to convert internal audit and risk functions from retrospective, sample-based reviewers into continuous-assurance partners aligned with that national agenda. Drawing on internal audit practice across diversified Saudi conglomerates spanning FMCG, QSR franchising, real estate, energy, and industrial distribution, the article proposes an integrated maturity framework that maps SAP Analytics and GRC capability against the IIA's Three Lines Model, COSO ERM (2017), and ISO 31000:2018, and against specific Vision 2030 programs. It further examines the alignment required with SAMA's Cyber Security and Business Continuity frameworks, ZATCA e-invoicing (Fatoora) controls, and the Saudi Data & AI Authority's (SDAIA) Personal Data Protection Law (PDPL). The article concludes with practical recommendations for internal audit functions seeking to move from periodic testing to embedded, analytics-driven risk monitoring while preserving independence and objectivity.
Keywords
Digital transformation, financial risk management, SAP Analytics, GRC systems, internal audit, Saudi Arabia, Vision 2030, Financial Sector Development Program, ERP, continuous auditing, COSO ERM, SAMA, ZATCA, PDPL
How to cite this paper
@article{1722452,
author = {Syed Rizwan Shahid},
title = {Digital Transformation of Financial Risk Management: The Role of SAP Analytics and GRC Systems in Saudi Enterprises},
journal = {Iconic Research And Engineering Journals},
year = {2026},
volume = {10},
number = {2},
pages = {2281-2286},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1722452.pdf},
abstract = {Saudi Arabia's Vision 2030 agenda — through the Financial Sector Development Program, the National Transformation Program's digital-government mandate, and the Kingdom's broader economic diversification and privatization drive — is the direct catalyst pushing large enterprises to rebuild financial risk management on a digital foundation. This article examines how SAP Analytics (Analytics Cloud, embedded BI, and predictive modules) and SAP Governance, Risk and Compliance (GRC) applications are being combined to convert internal audit and risk functions from retrospective, sample-based reviewers into continuous-assurance partners aligned with that national agenda. Drawing on internal audit practice across diversified Saudi conglomerates spanning FMCG, QSR franchising, real estate, energy, and industrial distribution, the article proposes an integrated maturity framework that maps SAP Analytics and GRC capability against the IIA's Three Lines Model, COSO ERM (2017), and ISO 31000:2018, and against specific Vision 2030 programs. It further examines the alignment required with SAMA's Cyber Security and Business Continuity frameworks, ZATCA e-invoicing (Fatoora) controls, and the Saudi Data & AI Authority's (SDAIA) Personal Data Protection Law (PDPL). The article concludes with practical recommendations for internal audit functions seeking to move from periodic testing to embedded, analytics-driven risk monitoring while preserving independence and objectivity.},
keywords = {Digital transformation, financial risk management, SAP Analytics, GRC systems, internal audit, Saudi Arabia, Vision 2030, Financial Sector Development Program, ERP, continuous auditing, COSO ERM, SAMA, ZATCA, PDPL},
month = {August},
doi = {https://doi.org/10.64388/IREV10I2-1722452}
}