What are the different types of controls in SAP?

The following are the type of controls available in an SAP system:

  • Inherent Controls – those which have been hard coded into the system and cannot be changed via configuration
  • Configuration Controls – those which can be changed to support control objectives (e.g. tolerance groups and validations)
  • Restricted Access Controls – those which can be designed during the creation and maintenance of security profiles to ensure access to sensitive processing functions and segregation of duties is appropriate
  • Manual Controls – those which operate outside of the system (but may relay on system outputs such as reports) and support the system controls above (e.g. reconciliations, sign-offs, and policies and procedures)