Cobit

[pic]
ISACA®
With more than 86,000 constituents in more than 160 countries, ISACA (www.isaca.org) is a leading global provider of knowledge, certifications, community, advocacy and education on information systems assurance and security, enterprise governance of IT, and IT-related risk and compliance. Founded in 1969, ISACA sponsors international conferences, publishes the ISACA® Journal, anddevelops international information systems auditing and control standards. It also administers the globally respected Certified Information Systems Auditor™ (CISA®), Certified Information Security Manager® (CISM®) and Certified in the Governance of Enterprise IT® (CGEIT®) designations. ISACA developed and continually updates the COBIT®, Val IT™ and Risk IT frameworks, which help IT professionalsand enterprise leaders fulfill their IT governance responsibilities and deliver value to the business.

Disclaimer
ISACA has designed and created Security, Audit and Control Features SAP® ERP, 3rd Edition (Technical and Risk Management Reference Series) Excerpt of the Audit/Assurance Programs and ICQs (the “Work”), primarily as an educational resource for control professionals. ISACA makes noclaim that use of any of the Work will assure a successful outcome. The Work should not be considered inclusive of any proper information, procedures and tests or exclusive of other information, procedures and tests that are reasonably directed to obtaining the same results. In determining the propriety of any specific information, procedure or test, control professionals should apply their ownprofessional judgment to the specific control circumstances presented by the particular systems or information technology environment. While all care has been taken in researching and documenting the techniques described in this text, persons employing these techniques must use their own knowledge and judgment. ISACA and Deloitte, its partners and employees, shall not be liable for any losses and/ordamages (whether direct or indirect), costs, expenses or claims whatsoever arising out of the use of the techniques described or reliance on the information in this reference guide.

SAP, SAP R/3, mySAP, SAP R/3 Enterprise, SAP Strategic Enterprise Management (SAP SEM), SAP NetWeaver, ABAP, mySAP Business Suite, mySAP Customer Relationship Management, mySAP Supply Chain Management, mySAP ProductLifecycle Management, mySAP Supplier Relationship Management and other SAP product/services referenced herein are the trademarks or registered trademarks of SAP AG in Germany and in several other countries. The publisher gratefully acknowledges SAP’s kind permission to use these trademarks and reproduce selected diagrams and screen shots in this publication. SAP AG is not the publisher of this bookand is not responsible for it under any aspect of press law.

Reservation of Rights
© 2009 ISACA. All rights reserved. No part of this publication may be used, copied, reproduced, modified, distributed, displayed, stored in a retrieval system or transmitted in any form by any means (electronic, mechanical, photocopying, recording or otherwise) without the prior written authorization of ISACA.Reproduction and use of all or portions of this publication are permitted solely for academic, internal and noncommercial use and for consulting/advisory engagements, and must include full attribution of the material’s source. No other right or permission is granted with respect to this work.

ISACA
3701 Algonquin Road, Suite 1010
Rolling Meadows, IL 60008 USA
Phone: +1.847.253.1545
Fax:+1.847.253.1443
E-mail: info@isaca.org
Web site: www.isaca.org

ISBN 978-1-60420-115-4
Security, Audit and Control Features SAP® ERP, 3rd Edition (Technical and Risk Management Reference Series) Excerpt of the Audit/Assurance Programs and ICQs
Printed in the United States of America

CGEIT is a trademark/servicemark of ISACA. The mark has been applied for or registered in countries...