Weblog:	The Current State of Internal Auditing
Subject:	Link does not work and a comment.
Date:	2009-07-02 15:05:24
From:	Julius von dem Bussche  Business Card
The link does not work, at least not for me. The biggest problem in auditing in my opinion are the various check-lists which auditors (both internal and external) have. They typically have many "check table xyz" and "run report abc" instructions in them. Regardless of the skills of the auditor (particularly if they are skilled), this creates a problem in the SAP world as reports and tables are not classed as "entry points" such as tcodes, rfc's and services are. Auditors, and the attempt to create a "diplay all" access and also use it for support etc is in my opinion a security hazard caused by this. It would be nice to see some standardization which meets auditability requirements, and make this standardly available in the SAP system. The AIS attempted to do this and is a cool tool - but few auditors stick to it or ask for it when they rock up on Monday morning, unprepared but with their check-list in hand. Just my opinion. Cheers, Julius

Previous Message Next Message  Showing messages 1 through 1 of 1. Titles Only Main Topics Oldest First Link does not work and a comment. 2009-07-02 15:27:08 Norman Marks  Business Card [Reply] Try this one. I don't know why the other link doesn't work - it did when I posted. http://www.informaworld.com/smpp/content~db=all~content=a912832223 Showing messages 1 through 1 of 1.

SAP, mySAP, mySAP.com, xApps, xApp, and other SAP products and services mentioned herein as well as their respective logos are trademarks or registered trademarks of SAP AG in Germany and in several other countries all over the world. All other product, service names, trademarks and registered trademarks mentioned are the trademarks of their respective owners.