What are the different types of controls in SAP?
The following are the type of controls available in an SAP system:
- Inherent Controls – those which have been hard coded into the system and cannot be changed via configuration
- Configuration Controls – those which can be changed to support control objectives (e.g. tolerance groups and validations)
- Restricted Access Controls – those which can be designed during the creation and maintenance of security profiles to ensure access to sensitive processing functions and segregation of duties is appropriate
- Manual Controls – those which operate outside of the system (but may relay on system outputs such as reports) and support the system controls above (e.g. reconciliations, sign-offs, and policies and procedures)