Book excerpt: Do you need expert guidance on how to plan, implement, and run access analyses? This book takes a practical approach to customer-specific SAP rulesets for compliance managers, GRC teams, identity and access management teams, as well as administrators running these systems. Identify types of risk and the tools available. Take a look at use cases and tools for risk analysis and explore how to optimize processes, quality of authorization roles and concepts, transparency of access rights to data, and functions for data and process owners. Explore key considerations for evaluating a tool for hosting a using a risk catalog. Take a look at limitations of risk catalogs and learn more about a methodology for customizing standard access to the risk catalog. Find out why the authors recommend starting with a small access risk catalog before move onto more complex landscapes. Take away best practices for bringing end users up to speed. - Considerations for hosting and using a risk catalog - Limitations of risk catalogs - methodology for customizing standard access - Risk handing process