Contact: Madonna Jarrett
Deloitte Touche Tohmatsu
Director, Global PR & CEO Communications
+1 212 492 3738

New York, April 23, 2007—Deloitte Touche Tohmatsu today announced a collaborative global initiative among Deloitte member firms and SAP AG (NYSE:SAP) to develop and deliver enterprise solutions to better serve clients in their efforts to enable efficient, effective and sustainable governance, risk and compliance (GRC) management processes.

"With this alliance and broad services capability, Deloitte member firms are uniquely positioned in the governance, risk and compliance space with unequaled depth and breadth of competencies to deliver on their GRC vision," said Deloitte Consulting LLP, USA, Principal Lee Dittmar, global leader of the Deloitte member firm SAP-GRC initiative. "The combination of both organizations brings together the necessary insights, experience and competencies to better leverage technology to address critical governance, risk management and compliance needs, including dealing with tax efficiency, fraud, financial reporting, industry-specific regulations and the need for risk intelligence."

The governance, risk and compliance alliance involves Deloitte member firms' consulting, advisory and implementation services and SAP's comprehensive and integrated software solutions for GRC. Both organizations will collaborate on solution and market development, education, training, sales and delivery. They will also continue to pursue joint thought leadership activities to help clients identify best practices and new ways to address their GRC challenges.

"Our customers are facing increased technology complexity and stringent regulatory pressures and are challenged to protect the interests of a broad spectrum of stakeholders by incorporating governance and compliance planning into their IT activities, projects and programs," said Amit Chatterjee, senior vice president of SAP's GRC business unit. "Achieving efficient and effective GRC requires a consistent, consolidated and enterprise-wide framework which incorporates people, process and technology. SAP and Deloitte member firms have stepped up to the challenge to help companies improve control of governance, risk and compliance. We are energized by this opportunity and excited to make a significant impact."

Governance, risk and compliance management processes can be a critical driver of value and competitive differentiation. It can help management accurately assess the risk of various business decisions, while controlling, addressing and then ultimately leveraging risk to their advantage. Current approaches to managing this are often impacted by highly fragmented business processes and systems, and little or no investment in identifying and mapping out an integrated approach to comprehensive GRC management.

"Today’s organizations need comprehensive frameworks and enterprise solutions to address their governance, risk and compliance needs and challenges," said Dittmar. "The goal should be to create a set of processes and information to help achieve the ongoing viability and performance of the enterprise." He concluded, "GRC can be a powerful concept to improve alignment among boards, the executive team, employees, suppliers, customers and other external stakeholders."

Deloitte offers an enterprise-wide, multidisciplinary approach to assist in improving and integrating GRC activities into core business processes and decision-making. It helps clients design and implement GRC programs that can reduce risks, costs and complexity while increasing executive, board and stakeholder confidence.  Deloitte also helps clients answer their most relevant questions: How can they more efficiently and effectively produce and manage GRC information? What does integrated GRC look like for their business? How can they enhance security and integrity of critical systems and information? Where can risk and compliance management activities be automated? How can the capabilities in their current systems be better utilized? Where can technology enable truly proactive risk management?

SAP solutions for governance, risk and compliance (SAP GRC) promote business viability by unifying corporate strategy, control initiatives, opportunity discovery and loss mitigation across the extended enterprise. A unified approach to GRC overcomes the challenges of driving corporate strategy, regulatory compliance and risk management across disconnected systems, regions and functions, creating increased business performance and competitive advantage. SAP solutions for GRC include, among others, SAP GRC Access Control, which enforces collaborative and continuous proper control for segregation of duties (SoD); SAP GRC Process Control, which ensures compliance by centrally monitoring key controls for business processes and cross-enterprise IT systems; and SAP GRC Risk Management, which provides process support for collaborative manual and automated risk identification and monitoring. For more information about SAP solutions for GRC, please visit http://www.sap.com/grc.

About Deloitte
Deloitte refers to one or more of Deloitte Touche Tohmatsu, a Swiss Verein, its member firms, and their respective subsidiaries and affiliates. Deloitte Touche Tohmatsu is an organization of member firms around the world devoted to excellence in providing professional services and advice, focused on client service through a global strategy executed locally in nearly 140 countries. With access to the deep intellectual capital of approximately 135,000 people worldwide, Deloitte delivers services in four professional areas—audit, tax, consulting, and financial advisory services—and serves more than 80 percent of the world's largest companies, as well as large national enterprises, public institutions, locally important clients and successful, fast-growing global growth companies. Services are not provided by the Deloitte Touche Tohmatsu Verein, and, for regulatory and other reasons, certain member firms do not provide services in all four professional areas.

As a Swiss Verein (association), neither Deloitte Touche Tohmatsu nor any of its member firms has any liability for each other’s acts or omissions. Each of the member firms is a separate and independent legal entity operating under the names "Deloitte," "Deloitte & Touche," "Deloitte Touche Tohmatsu" or other related names.