Surviving an SAP Audit

Steve Biskie is the Best Practices Director for ACL Services Ltd, a worldwide provider of audit analytics software. He is also the founder of SAP Audit Solutions, a consultancy focused on helping companies manage the SAP audit process. He has been involved in the audit of SAP systems and implementation of GRC in SAP environments since 1993as an external auditor (with Deloitte), internal auditor, consultant, and project team member. He is a nationally-recognized expert on SAP audit and control, and speaks frequently on the subject at various conferences (GRC2008 and SAPPHIRE).

Preface
Introduction
Audit Overview
Types of Auditors
Categories of Audit Objectives
Auditing Principles and Considerations
Understanding the Audit
Audit Reporting
Rules of Engagement
Summary
Overview of the Typical SAP Audit
Timing for the SAP Audit
The Building Blocks of an SAP Audit
Common Problems and Solutions
The Start of the Audit
Summary
SAP Implementations and Upgrades
Reasons for Considering Internal Controls During an Implementation
Creating a Control-Conscious Implementation
Designing Effective Controls
Control Considerations by Implementation Phase
The Foundation for an SAP Audit: General Computer Controls, SAP Basis Settings and Security
General Computer Controls
SAP Basis Settings and Security
Summary
Financial Reporting Cycle
Risks
Security and Master Data
SAP Configurable Control Considerations
Additional Procedures and Considerations
Management Monitoring: SAP Report Highlights
Summary
Order-to-Cash Cycle
Risks
Security and Master Data
SAP Configurable Control Considerations
Additional Procedures and Considerations
Management Monitoring: SAP Report Highlights
Summary
Purchase-to-Pay Cycle
Risks
Security and Master Data
SAP Configurable Control Considerations
Additional Procedures and Considerations
Management Monitoring: SAP Report Highlights
Summary
SAP Audit Tricks and Tools
The Audit Information System (AIS)
Computer Assisted Audit Techniques (CAATs)
SAP BusinessObjects GRC Solutions
Continuous Auditing and Continuous Monitoring
Summary
Final Audit Preparations
Overview
Pre-Planning
Documentation: Preparing an Audit Binder
Systems: Preparing for the Auditor
Employees: Preparing Your Team
Expert Advice
Summary
The Author
Index