Article

The Challenge of Auditing SAP

Author Info

4 June 2008 - 11:38am
Submitted by: otoquero

article
Reads:

4162

Score:
3.666665
3.7
3
 
Comments:

0

SAP can be auditing for different purposes, from security events like log application, to business related rules like monitoring purchase orders or requisitions to avoid frauds.

SAP could be a headache because tables and fields have German abbreviations and they’re hard to recognize. Here are some tips if you’re planning to audit SAP applications.

First thing you need is to have installed SAP GUI, the second thing is use Quick Viewer within SAP GUI to obtain the descriptions of tables and fields. You can execute SQ01 transaction to call Query SAP an then use Quick Viewer.

There are some important tables for every module in SAP.

For example:

  • LFA1 contains Vendor Master
  • MARA contains Material Master
  • EINA contains Purchasing info Record
  • EKPO contains Purchase Orders
  • MSEG contains Goods Receipt

Another important table is DD02T, which contains descriptions for all the tables. You can query this table and based on the description name choose those who fit your requirements.

I really hope someone encountered something useful in this information and the power point slides. Personally I’m not a SAP expert and I spent a lot of time in research, for those who don’t know, SAP has nearby to 72,000 tables!!

Good Luck!

AttachmentSize
Auditing SAP with Sentinel.ppt902.5 KB

Author Info

4 June 2008 - 11:38am
Submitted by: otoquero




User Comments

© 2009 Novell, Inc. All Rights Reserved.