SAP Process Control

... Preface ... 15

... Target Audience ... 15

... How to Read This Book ... 16

... How This Book Is Organized ... 16

... Conclusion ... 18

... Acknowledgments ... 18

1 ... Introduction to SAP Process Control ... 21

1.1 ... History of SAP Process Control ... 21

1.2 ... Architecture and Landscape ... 24

1.3 ... Regulatory Requirements, Supported Systems, and Integrations ... 25

1.4 ... Enterprise Risk and Internal Control Management ... 35

1.5 ... Enterprise Risk and Compliance Management ... 36

1.6 ... Summary ... 38

2 ... Governance ... 39

2.1 ... Strengthen Internal Controls ... 40

2.2 ... Manage Internal Controls ... 46

2.3 ... Integration Approach ... 51

2.4 ... Summary ... 55

3 ... Prerequisites ... 57

3.1 ... Check License Agreements ... 57

3.2 ... System Sizing ... 59

3.3 ... Component and Plug-In Requirements ... 61

3.4 ... Summary ... 63

4 ... Basic Configuration ... 65

4.1 ... Initial Configuration ... 65

4.2 ... Workflow Configuration ... 71

4.3 ... Shared Master Data Settings ... 88

4.4 ... Integration Framework ... 92

4.5 ... Multiple Compliance Framework ... 98

4.6 ... Other Configurations ... 105

4.7 ... Introduction to Work Centers for SAP Process Control ... 112

4.8 ... Summary ... 118

5 ... Master Data Management ... 119

5.1 ... Introduction to Master Data ... 119

5.2 ... Business Process Hierarchies ... 122

5.3 ... Organization Hierarchies ... 156

5.4 ... Users and Roles ... 163

5.5 ... Working with Indirect Entity-Level Controls ... 169

5.6 ... Approval Workflow for Master Data Changes ... 173

5.7 ... Uploading Master Data Using the Master Data Upload Generator ... 178

5.8 ... Summary ... 181

6 ... Control Evaluation ... 183

6.1 ... Introduction to Control Evaluation ... 183

6.2 ... Control Design Assessment ... 185

6.3 ... Control Self-Assessment ... 223

6.4 ...

Raghu Boddu is the managing director of ToggleNow Software Solutions. He has more than 25 years of experience with SAP security, GRC, audits, and automations. Raghu is a certified information systems auditor (CISA), a certified fraud examiner (CFE), a certified data privacy solutions engineer (CDPSE), and a certified SAP security profession and GRC associate. He has served on the Information Systems Audit and Control Association state board and contributed articles, blog posts, automation stories, and vlogs to the security community. He was named a Microsoft Most Valuable Professional (MVP) for three consecutive years in the Windows Shell space. He has published more than 30 Microsoft Knowledge Base articles.