SAP Consulting and Audit
SAP installations have biggest advantage of centralized processing and updated information on real time basis. The data integrity and updated reports are facilitated by the fact that there is an integrated Database which enables successful operations of various modules installed on SAP platform. On the other hand data being managed from single server can also be a single point failure across the enterprise. SAP has become critical component of the organization’s internal control framework and hence the need of adequate and effective security controls become important to ensure confidentiality, integrity and availability of enterprise-wise information. We provide diagnostic support to the organization to identify control weaknesses that may exist since implementation of SAP. Traditional controls may no longer guarantee that errors will be detected. With changing business practices and new regulatory compliance requirements emphasis of controls has moved from detective controls to proactive controls. Amongst other SAP consulting activities include
- Critically examining and providing support for business process controls
- Infrastructure security controls
- Application security controls
- IT operational controls
- Data conversion controls
- Data interface and project management support.
We can assist you determine whether the embedded key controls in SAP have been effectively utilized in the implemented modules. Our structured risk based approach is supported by comprehensive knowledge and wide experience of our consultants. The spectrum of SAP support and audit services can be viewed better in the following Cycle matrix.
Business Process related Support
Analyze existing business processes and help the business managers and process owners to build a blue print of the would be processes in SAP and help transition to the SAP good practice processes.
Understand existing SAP configured controls and help the SAP admin and Process owners to further strengthen the configured controls and provide improved procedures if required.
Design and orient the staff about the implementation of good business process controls and assist internal control team for documentation.
Review of existing SAP information security architecture, IT governance framework Provide analytics, information about authorizations, roles and control weaknesses in respect of segregation of duties (SOD) and inherent controls in other processes like Procure to Pay, Order to Cash, fixed assets management, Inventory Control processes etc.
Examine organization structure, implementation status of COBIT or any other similar framework and review infrastructure controls Evaluate business continuity measures, Change management procedures and transportation to production servers and availability management.
Provide support for plan and oversee the procedure of data migration from legacy system to SAP supported database. Ensure data integrity in data conversion from old data bases to new database.
Provide implement appropriate controls during migration to new system Evaluate status of interface controls and improve them.
SAP Administration Support
Provide SAP Basis administration and infrastructure support and help design appropriate authorizations, user roles, and user profiles.
Support management for plan and draft security policies, control procedures and SAP administrative controls.
Review and provide support in respect of business continuity policies, backup and restoration, change management, capacity management.