Dear Alex,
1.Obtain a company organizational chart.
2.Obtain a copy of all security policies and procedures.
3.Obtain a diagram of the SAP application architecture.
4.Obtain a copy of “problem tracking” or “incident report” for the application being audited.
5.Obtain a copy of all system enhancements that are queued up for implementation.
6.Obtain a copy of the application’s documentation.
7.Obtain a copy of the development methodology used to complete the system.(Business and Design Requirements Processes)
8.Obtain a copy of any service level agreements established for the application.
9. Obtain a copy of the contingency/backup plan for the application
10. Obtain a copy of the Corporate Disaster Plan
11. Determine which release of SAP is installed
12. Identify the modules installed.
13. Determine the interfaces to the production system
14. Determine the number of client systems running.
15. Determine which geographical locations are running SAP
16. Determine what level of custom programming in on-going
• ABAP/4 programs
• Data entry screens
17. Evaluate the overall SAP security architecture
18. Determine the operating systems and database management systems running within the environment
19. Obtain a listing of all SAP clients
Detailed list is sent to your mail id.
Regards,
Rakesh
Do award points if you found them useful.
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.