Risk Analysis & Access Control Tools Comparison
A short selection of market leading tooling with a strong Access Risk Analysis capability.
| Category | Feature/Aspect | MTC Skopos | Pathlock | SAP (GRC AC) | Access Informer | IBS Schreiber (CheckAud) | Soterion |
|---|---|---|---|---|---|---|---|
| General | Primary Focus | Access Risk Analysis | Access governance & compliance & Provisioning | Access governance & compliance & Provisioning & PAM | Access Risk Analysis | Access Risk Analysis | Cloud security & access management |
| Orientation | Specialized Risk Analysis | Complete Suite | Complete Suite | Specialized Risk Analysis | Audit & Compliance | Risk management Suite | |
| Target Market | Consultants or Any ERP Customers | SAP customers | SAP customers | SAP customers | Consultants or Any ERP Customers | SAP customers | |
| Deployment | On-premise | Cloud | On-premise/Cloud | On-premise | On-premise | Cloud | |
| Privacy | Complete | Subject to risk (cloud) | Not specified | Complete | Complete | Subject to risk (cloud) | |
| Installation | None | Not specified | Yes (on-premise) | Yes | Yes | Not specified | |
| Infrastructure | None | Not specified | Yes (on-premise) | None | None | Not specified | |
| Integration Capabilities | Multi-platform | Broad connectivity | SAP-optimized | SAP-optimized | SAP-optimized | SAP-optimized | |
| User Experience | Intuitive design | Dashboard-driven | SAP-style interface | Intuitive design | Audit-focused UI | Dashboard-driven | |
| Analysis Speed | Ultra fast | Not communicated | Slow | Relatively fast | Relatively fast | Not communicated | |
| Implementation Complexity | Very Low | Medium | High (SAP) | Low | Low | Low to Medium | |
| Pricing Model | Transparent & Flexible | Not publicly disclosed | Not publicly disclosed | Transparent & Fixed | Not communicated | Not communicated | |
| Limitation | None | Price based on User & System monitored | Price based on User & System monitored | None | None | Not communicated | |
| Features | Cross System Analysis | ✅ Any ERP | ✅ Any ERP | ✅ Any ERP | Not specified | Not specified | ✅ SAP & SuccessFactors |
| Compliance Reporting | ✅ Risk Analysis Report | ✅ Dashboard | ✅ Dashboard & Report | ✅ Dashboard & Report | ✅ Report | ✅ Dashboard | |
| Remediation Guidance | ✅ Remediation report | Not specified | Not specified | Not specified | Not specified | ✅ Get clean Wizard | |
| Remediation (write-back) | Not specified | ⚠️ Limited | ✅ Extensive | Not specified | Not specified | ⚠️ Limited | |
| Simulation | ✅ Extensive | ⚠️ Limited | ⚠️ Limited | ✅ Extensive | Not specified | ⚠️ Limited | |
| Ruleset Customization | ✅ Extensive | ❌ Critical Permission not possible | ✅ Extensive | ✅ Extensive | ⚠️ Moderate (no mass changes) | ⚠️ Moderate (no mass changes) | |
| AI Integration | ✅ Model Context Protocol | Not specified | Not specified | Not specified | Not specified | Not specified | |
| Dashboard | ⚠️⚠️ Data model for professional dashboard tooling | ⚠️ Basic | ⚠️ Basic | ⚠️ Basic | ⚠️ Basic | ⚠️ Basic | |
| Did-Do Analysis (Execution) | ✅ Extensive | ⚠️ Basic | ⚠️ Basic | ⚠️ Basic | Not specified | ⚠️ Basic | |
| Did-Do Analysis (Change log) | ⚠️ Basic | ✅ Extensive (AVM) | Not specified | ⚠️ Basic | Not specified | ✅ Extensive |
Legend
- ✅ Full capability/Excellent
- ⚠️ Partial capability/Good
- ❌ Limited capability/Poor
- Not specified - Information not available
Key Insights
MTC Skopos Advantages:
- Ultra-fast analysis speed
- Very low implementation complexity
- Extensive simulation capabilities
- AI integration with Model Context Protocol
- Works with any ERP system
- Transparent pricing
- Complete privacy (on-premise)
Pathlock Strengths:
- Cloud-native deployment
- Complete GRC Suite not limited to Access Risk monitoring
- Broad system connectivity
- Excellent Did-do Analysis (AVM)
SAP GRC Benefits:
- Deep SAP integration
- Complete GRC Suite not limited to Access Risk monitoring
- Extensive remediation write-back
- Native SAP workflow integration
Access Informer Highlights:
- Specialized risk analysis focus
- Intuitive user experience
- Transparent fixed pricing
- Extensive simulation capabilities
- Complete privacy (on-premise)
- Low implementation complexity
IBS Schreiber (CheckAud) Focus:
- Audit and compliance specialization
- Works with consultants
- Complete privacy (on-premise)
- Low implementation complexity
Soterion Advantages:
- Cloud-native security approach
- SAP & SuccessFactors integration
- Risk management suite
- Get clean wizard for remediation
- Excellent business insights
- Excellent Did-do Analysis
Note: This comparison is based on available public information and vendor specifications. Some capabilities marked as "Not specified" may be available but not documented in public materials.