SAP Audit / Security

A well-designed and effectively operated authorization concept is one of the most critical elements of the IT control environment. With our service, you can assess the strengths and weaknesses of your SAP authorization concept and verify whether system access is properly managed. In the case of system implementations or major transformations, our professionals support the design of the authorization concept, the setup of SAP roles, and the assessment of required access rights.

This is particularly timely today, as the transition to SAP S/4HANA has become a strategic priority for many organizations due to the 2027 end of support for ECC systems. S/4HANA’s modern, has faster performance, more efficient analytics, and simpler integration helps delivering a real competitive advantage.

Our experts have extensive experience in S/4HANA security, authorizations, and role design.

Who do we recommend it for?

  • Heads of Internal Audit
  • Compliance Managers
  • Finance and/or IT Directors
  • SAP Operations / Security Managers

What do we do?

  • Review the security of the SAP system
  • Assess the authorization concept and related processes
  • Perform Segregation of Duties (SoD) audits
  • Evaluate opportunities for control automation (Continuous Auditing, Continuous Monitoring)
  • Based on the results, provide detailed and practical recommendations to enhance security and improve the effectiveness of controls

Why is it useful?

We provide clear answers to the following questions:

  • Is our SAP system secure?
  • Is the authorization concept and the related processes appropriate?
  • What risks are inherent in SAP authorizations?
  • Is there an opportunity to automate manual controls?

Your personal contact:

Ferenc Smohay

Partner

IT Audit and Advisory