“Secure, periodic review of user access across SAP systems — simple for managers, transparent for auditors.”