The customer is king.+1-888-477-4950
Who we are

Senior people. No vendor leash.

Independent trusted advisor to customers first and product vendors second. Membership is senior consultants only: proven methods, shorter delivery, practical training, and product evaluations that are not a sales call.

Quicker return

Advisory, implementation, and remediation with no incentive from the software vendor on the technology choice.

Senior only

More finished in less time than a junior bench. Immediate ROI, and a team that can sustain it.

No redo

Realistic, tangible, sustainable compliance. Repeat business from global customers, not a recall.

Where we sit

Senior principal advisors in North America and Europe. Enterprise and business-unit work, with offices in the US, Canada, and Europe.

The team on the work.

Customer, vendor, and consultant experience in the same room.

Chief Executive Officer

James E. Roeske

GRC and security speaker, practitioner, and advocate since 1995. Founded firms that became the de facto implementers of SAP GRC after SAP acquired Virsa Systems. 250+ customer implementations. More than 27 years as an auditor, SAP security architect, and compliance practitioner.

Chief Operating Officer

Jamie Frame

25+ years in information security, GRC, risk, and audit. Led over 30 large-scale security and global ERP transformation projects for multiple F100 companies. Builds the operating programs that stay compliant after go-live.

Senior consultant

Ruth Johnson

20+ years in SAP security design, SoD, and audit, with more than 9 years on SAP GRC, including SAP GRC Access Control 12.0 upgrades. Conference speaker and a leading expert on SAP GRC Access Control workflow. In-house and advisory experience, public and private sector.

Senior consultant ยท Germany

Dina Shahin

25+ years in SAP security, SoD, GRC, IAG, and audit. Over 150 engagements across sizes and industries. Plans, implements, trains, and administers. Based in Germany.

Senior consultant

Gabriel Perez

20+ years of SAP security, focused on SAP GRC Access Control and SAP GRC Process Control, including the SAP ramp-up program for SAP GRC Process Control, and security design. Prior GRC implementations, access remediation, and mitigation. Eight years in the Army Reserves.