SAP ECC system is complex and the first step will be to have a Risk management process to address your SAP Audit Compliance. This could be an SAP Access Control or SAP Process Control Solution. Both solutions can give you some level of risk management solution which helps the internal auditor. But there is a huge difference in their results and value it can provide.
Access Controls: Provides information on the Transaction assigned
SAP Access Control can provide you with the access violations with the access of an SAP user or SAP role. Here you purely look at the transaction access. This can give you valuable insight into the Potential risk in your SAP ECC System. But it does mean the risk actually happened. With New SPA GRC Version you can even look at the number of times the risk was executed. But this is a false sense of hope given to the auditors, as it does not provide the changes or risk which really happened.
SAP Process Control: Risk with Dollar value assigned
With process control, you can really see the actual risk which has happened in the system and potential loss it could have for your company. In this case, the auditor can really see exact transaction changes which have happened in the vendor master or customer master or invoice payment. This way he or she is not really not relying on Just execution but also on the transactions which have posted in the system and the potential loss which could happen if the changes are nor investigated. The process control tool for SAP Properly configured can give you the exceptions only based on rules you have defined.
The example in finance could be Maintaining the account and posting it. In the Access Control Scenario, you can only see that the combined transactions were executed.
Key Benefits of the Process Control Solution
- Real-time audit checks for business processes
- Flags transactions out of the normal
- Immediate ROI: detection of errors, fraud, inefficiencies => avoid losses
- Root cause analysis on problematic transactions identify issues caused by weak processes, outside organizations etc.
- Workflows: reduce overhead in detection, investigation, documentation
- Improve internal control system, compliance; ease audits (evidence controls, follow-up
[vc_row css=”.vc_custom_1512575306373{margin-top: 50px !important;}”][vc_column width=”1/3″][vc_cta h2=”Free Step by Step SAP License Optimization Guide” shape=”square” add_button=”bottom” btn_title=”click here” btn_style=”flat” btn_color=”default” btn_i_icon_fontawesome=”stm-diamond” btn_css_animation=”left-to-right” css_animation=”left-to-right” btn_add_icon=”true” css=”.vc_custom_1512579904776{padding-top: 50px !important;padding-right: 35px !important;padding-bottom: 50px !important;padding-left: 35px !important;background-color: #3a80f1 !important;}” btn_link=”url:http%3A%2F%2Fexpressgrc.com%2Ffree-sap-license-optimization-guide%2F||” el_class=”c_action”]SAP Customer is liable to pay 70 Million additional SAP licensing fees as a result of what is broadly known as Indirect Access.[/vc_cta][/vc_column][vc_column width=”1/3″][vc_cta h2=”Free SAP GRC 10.0 Step by Step Guide” shape=”square” add_button=”bottom” btn_title=”download here” btn_style=”flat” btn_color=”default” btn_i_icon_fontawesome=”stm-diamond” btn_css_animation=”left-to-right” css_animation=”bottom-to-top” btn_add_icon=”true” css=”.vc_custom_1512579856805{padding-top: 50px !important;padding-right: 35px !important;padding-bottom: 50px !important;padding-left: 35px !important;background-color: #f1b500 !important;}” btn_link=”url:http%3A%2F%2Fexpressgrc.com%2Fsap-grc-10-1-step-step-guide%2F||” el_class=”c_action”]Are you fed up with being not able to get job? Tired of being disappointed in yourself, because you just can’t seem to get started in the career as SAP GRC Consultant?[/vc_cta][/vc_column][vc_column width=”1/3″][vc_cta h2=”Financial Loss due to Fraud Risk” shape=”square” add_button=”bottom” btn_title=”click here” btn_style=”flat” btn_color=”default” btn_i_icon_fontawesome=”stm-diamond” btn_css_animation=”left-to-right” css_animation=”right-to-left” btn_add_icon=”true” css=”.vc_custom_1512579731433{padding-top: 50px !important;padding-right: 35px !important;padding-bottom: 50px !important;padding-left: 35px !important;background-color: #1d9e3f !important;}” btn_link=”url:http%3A%2F%2Fexpressgrc.com%2Ffree-sap-process-control-step-step-guide%2F||” el_class=”c_action”]Using the right kind of SAP Controls in the right way can be trans formative for any SAP System[/vc_cta][/vc_column][/vc_row]