如何检查SAP系统的变更清单
IT审计在一般控制中的变更管理的控制环节中，变更流程是关注的重点，一般需要企业提供变更清单，根据过往经验，变更清单在OA系统或纸质申请单居多，那么如果企业使用纸质申请单（即线下申请流程），那么SAP系统的变更清单一般不全，即样本的完整性存在问题。
针对SAP，我们一般是获取系统的变更记录，通过变更记录对应寻找变更单，获取途径如下：
| PROCEDURES: 1) Obtain client's Change Management policies and procedures. 2) Obtain a system generated list of program changes by performing the following: Step 1: To view table contents enter “SE16” on the command box Step 2: Enter table name “E070” in the tale name field and press enter Step 3: Enter the following selection parameters to randomly select the list of change requests and execute (F8) Date : period under scope Type : “K”- Workbench Request “W”- Customizing request “X” – Unclassified task “Q” – Customizing task Status: “D” - Modifiable “O” – Release Started “R” – Released 3) If there are no changes, determine that changes have not occurred by the last compile date for the IT component in scope to determine there was no change during the audit period. Determine that a documented change management process exists and is maintained to reflect the current process. |
通过系统获取的变更记录，再核对变更申请单，能够较好的了解企业变更流程的执行情况。
56222909@qq.com
20-06-10 16:21
我觉得您说的非常好，收益很大，期待您多发一些技术类的文章。
如何检查SAP系统的变更清单
wangcheng
会员积分：560
IT审计在一般控制中的变更管理的控制环节中，变更流程是关注的重点，一般需要企业提供变更清单，根据过往经验，变更清单在OA系统或纸质申请单居多，那么如果企业使用纸质申请单（即线下申请流程），那么SAP系统的变更清单一般不全，即样本的完整性存在问题。
针对SAP，我们一般是获取系统的变更记录，通过变更记录对应寻找变更单，获取途径如下：
| PROCEDURES: 1) Obtain client's Change Management policies and procedures. 2) Obtain a system generated list of program changes by performing the following: Step 1: To view table contents enter “SE16” on the command box Step 2: Enter table name “E070” in the tale name field and press enter Step 3: Enter the following selection parameters to randomly select the list of change requests and execute (F8) Date : period under scope Type : “K”- Workbench Request “W”- Customizing request “X” – Unclassified task “Q” – Customizing task Status: “D” - Modifiable “O” – Release Started “R” – Released 3) If there are no changes, determine that changes have not occurred by the last compile date for the IT component in scope to determine there was no change during the audit period. Determine that a documented change management process exists and is maintained to reflect the current process. |
通过系统获取的变更记录，再核对变更申请单，能够较好的了解企业变更流程的执行情况。
20-05-26 14:53
1327
1
回复
我觉得您说的非常好，收益很大，期待您多发一些技术类的文章。
20-06-10 16:21
