8

SAP

(.)
2549

AGENDA

SAP

GFMIS
Implement SAP

SAP
SAP


GFMIS

SAP

SAP

ERP (Enterprise Resource Planning System)

1
SAP Enterprise Resource Planning
System (ERP)
(FI module)
(CO module)
(SD module)
(MM module)
(PP module)

(PM
module)

(PS module)
Basis (Basis system)

Enterprise
Resource
Planning
Business
Scenario
by Selecting
ProcessesSystem
Financial Controlling
Cost Controlling
Sales

Sales order

Initial
Contact

Customer
order

Inventory
Sourcing

MPS

MRP

Production
SOP

Procurement

Logistics Controlling

Purch.
req.

Vendor
selection

Delivery

Planned
order

Purch.
order

Invoicing

Customer
payment

Prod.
order

Prod.
control

Goods
issue

Vendor
Invoice
payment
verificat.

Sales, Production, Purch., Warehouse Mgmt

SAP Solutions

SAP R/3

Organizational Units

Business
Enterprise

Client

Financial Accounting/
Sales

Company Code

Production/ Distribution

Inventory Management
SAP AG 1999

Sales Organization

Controlling Area

Cost Accounting

SAP

Plant

Storage
Location

Distribution
Channel

Plant

Storage
Location

Storage
Location

...

GFMIS
(Government Fiscal Management Information System)

GFMIS

22
..2546 SAP R/3

2

(Operation System)
/

1.

2.

(Business Warehouse)


Operating System
(GFMIS)

FM

PO

BIS

MIS
(
MIS )
BW SEM
SAP R/3

HR

DPIS

e
Procureme
(e-catalog,e
nt
e-Auction)list
shopping

GFMIS

FI

RP

AP
CM

FA

GL

e-Payroll , e
Pension

CO

AFMI
S

 Implement SAP

ASAP Methodology
Business
Processes: ASAP Methodology

ASAP Roadmap
Continuous

Project
Preparation
Business
Blueprint

Realization

Methodology

Final
Preparation

Improvement
Go Live &
Support

SAP Implementation

Source: SAP ASAP

Defining the Points on the ASAP Roadmap

ASAP Roadmap
Initial Project Planning
Project Procedures
Training
Project Kickoff
Technical Requirements
Quality Check

Project Management
Organizational Change Management
Training
Baseline Configuration and Confirmation
System Management
Final Configuration and Confirmation
Develop Programs, Interfaces etc.
Final Integration Test
Quality Check

Continuous

Project
Preparation
Business Realization
Blueprint
Project Management
Organizational Change Management
Training
Develop System Environment
Organizational Structure Definition
Business Process Analysis
Business Process Defintion
Quality Check

SAP AG 1999

Production Support
Project End

Improvement
Final
Preparation Go Live &
Support
Project Management
Training
System Management
Detailed Project Planning
Cutover
Quality Check



SAP

(Management involvement not just commitment)
(Changes

Management)

(Project Ownership)


(Post implementation management)

 SAP

SAP

Implement SAP

Business Process Controls

Application Security (Segregation Of Duties)
Program Interface
Conversion Control
Technology Infrastructure
End User Training
Master Data Maintenance
Project Management

 SAP
Development

Quality
Assurance

Sandbox

Production

SAP
(Manual / procedural controls)

(Inherent controls)

(Configuration controls)
(Logical access controls)

(Segregation of
duties)

(Reporting Controls)

Inherent & Configurable Controls

Configuration Controls

Inherent Controls

Duplicate checks through

message control
Sequential documents thorugh
number ranges
Automatic integration and
postings
All transactions through unique
documents
History of transactions
executed by users retained incl
uding date, time and user
Logging and history of program
changes

Edit Check
Data Entry Validations
Document Blocking
Tolerance Levels
Authorization Groups
Payment Blocking
Document Types
User defined Error / Warning
Messages
Automatic Posting with predefined
posting keys
Reason Codes
Predefined Master Data
SAP Workflow
Mandatory and/or System
populated fields

 SAP


SAP
Audit Business Cycles

SAP Module Functional Category

Financial Accounting
Treasury

Financial Applications
FI, CO, TR

Fixed Assets
Expenditure

Logistic Applications
MM, SD, PP

Revenue
Inventory Management
Payroll and Personnel

Human Resources
HR

 SAP

SAP
(Risk-based Audit Approach)

SAP (Gaining an
understanding)

(Identifying the significant risks)

Business Process Controls

Application Security
Program Interface
Master Data Maintenance

(Determining key controls)

Manual / Procedure Controls

Inherent Controls
Configuration Controls
Logical Access Controls
Reporting Controls

(Testing those controls to confirm their adequacy)

 SAP
(AIS)
Audit Information System (AIS)

SAP

(Inherent Control &

Configuration Control)
AIS
1.
(System Audit)
- System configuration
- System logs and status displays
- Development / customizing

2.
(Business Audit)
- Organization overview
- Financial statement oriented audit
- Process-originated audit

(AIS)

SAP

Audit ICQs SAP R/3

SAP

(Segregation Of Duties) Virsa System

Audit Program SAP R/3

Recommended Web Links

http://www.sapsecurity.net/securitydocs.htm
http://www.sapgenie.com/
http://www.thaisap.com/sapfact.asp
http://help.sap.com/
http://sap.ittoolbox.com/
http://www.sap.info/
http://www.auditnet.org/sapaudit.htm
http://big4guy.com/
Security, Audit and Control Features SAP R/3 2nd Edition (Book)