Internal Auditing

Hi All
How is the process of internal auditing in SBO.
Can we record the name of the internal auditor (user name) some where in the system
Advance New Year wishes
TIA
Regards
Rashid

You can use the Comment field in documents to record this information regarding auditing or add a UDF to record the details of auditing

Similar Messages

SAP-INTERNAL AUDIT BOOKS

Hi Abappers,
I need books for sap-internal audit, plz suggest me the books on all sap-modules(MM,SD,PP,QM,FICO,PM).
Regards,
simba.

Hi,
If you have s-user id, refer to this link
https://websmp101.sap-ag.de/~form/sapnet?_SHORTKEY=01100035870000694147&_SCENARIO=01100035870000000183&_ADDINC=011000358700001192682007E&
Regards,
Vijay Kumar
SAP Business One Forums Team

Object level checking for some of the basis tcodes(internal audit)

Hi masters,
in our company every month we check access controls for some of basis tcodes,i am giving it below,is the selection for Tcode and object level values combinations are correct or is there any modifications please notify.
Tcodes     Imp Auth Objects     Auth fields     Auth values
SCC1     S_CLNT_IMP     Actvt     21,60
     S_TABU_CLI     CLIIDMAINT     X
SCC4     S_TABU_CLI     CLIIDMAINT     X
     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SCC5     S_CLNT_IMP     Actvt     21,60
     S_TABU_CLI     CLIIDMAINT     X
SCC7     S_TRANSPRT     Request type     *
          Actvt     43,60,75
     S_CLNT_IMP     Actvt     21,60
SCC8     S_DATASET     PROGRAM     *
          Actvt     06,34,A7
     S_TRANSPRT     Request type     *
          Actvt     43,60,75
SCC9     S_TABU_CLI     CLIIDMAINT     X
     S_CLNT_IMP     Actvt     21,60
SCCL     S_TABU_CLI     CLIIDMAINT     X
     S_CLNT_IMP     Actvt     21,60
SCU0     S_TABU_DIS     Authorization Group     SS
          Actvt     01,02
     S_TABU_RFC     Actvt     3
OBR1
SM01     S_ADMI_FCD          TLCK
SM04     S_ADMI_FCD          PADM
SM12     S_ENQUE     S_ENQ_ACT     DPFU,DLOU
SM13     S_ADMI_FCD          UADM,UMON
SM50     S_ADMI_FCD          PADM
SM54     S_ADMI_FCD          NADM
SM55     S_ADMI_FCD          NADM
SM56
SM59     S_ADMI_FCD          NADM
               RFCA
SMLT     S_LANG_ADM     Actvt     02,16,61
          Table     *
SPAD     S_SPO_DEV     SPODEVICE     *
SP01     S_SPO_DEV     SPODEVICE     *
     S_ADMI_FCD          SP01,SP0R
ST01     S_ADMI_FCD          ST0M,ST0R
ST05     S_ADMI_FCD          ST0M,ST0R
RZ04     S_RZL_ADM     Actvt     1
RZ06     S_RZL_ADM     Actvt     1
RZ10     S_RZL_ADM     Actvt     1
RZ21     S_RZL_ADM     Actvt     1
     S_BTCH_JOB     JOBGROUP     *
          JOBACTION     DELE,RELE
SM49     S_LOG_COM     Command     *
          Opsystem     *
          Host     *
     S_RZL_ADM     Actvt     1
SM69     S_RZL_ADM     Actvt     1
SM63     S_RZL_ADM     Actvt     1
SMLG     S_RZL_ADM     Actvt     1
SE16     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SM30     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SM31     S_TABU_DIS     Authorization Group     *
          Actvt     01,02
SPRO     S_PROJECT     PROJECT_ID     *
          APPL_COMP     *
          PROJ_CONF     *
          Actvt     02,06
     S_DOKU_AUT     DOKU_ACT     MAINTAIN
          DOKU_DEVCL     *
          DOKU_MODE     *
SPRO_ADMIN     S_PROJECTS     APPL_COMP     *
          PRCLASS     *
          Actvt     01,70
     S_PROJECT     PROJECT_ID     *
          APPL_COMP     *
          PROJ_CONF     *
          Actvt     02,06
PFCG     S_USER_AGR     ACT_GROUP     *
          Actvt     01,02
     S_USER_PRO     Actvt     01,02
          PROFILE     *
SM19     S_ADMI_FCD          AUDA,AUDD
SU01     S_USER_AGR          *
               01,02
     S_USER_GRP     Class     *
          Actvt     01,02
SU02     S_USER_PRO     Profile     *
          Actvt     01,02
SU03     S_USER_AUT     OBJECT     *
          AUTH     *
          Actvt     01,02
     S_USER_PRO     Profile     *
          Actvt     01,02
SU05
SU10     S_USER_GRP     Class     *
          Actvt     01,02
SU12     S_USER_GRP     Class     *
          Actvt     01,02
SU20     S_DEVELOP     DevClass     *
          ObjectType     SUSO
          ObjectName     *
          P_Group     *
          Actvt     01,02
SU21     S_DEVELOP     DevClass     *
          ObjectType     SUSO
          ObjectName     *
          P_Group     *
          Actvt     01,02
SU22     S_DEVELOP     DevClass     *
          ObjectType     SUST
          ObjectName     *
          P_Group     *
          Actvt     01,02
CMOD     S_DEVELOP     DevClass     *
          ObjectType     CMOD
          ObjectName     *
          P_Group     *
          Actvt     01,02
SA38     S_PROGRAM     P_Action     SUBMIT,BTCSUBMIT
          P_Group     *
SD11     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     UDMO,UENO
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE11     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     DOMA,DTEL.ENQU
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE12     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     DOMA,DTEL.ENQU
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE13
SE14     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     INDX.MCID,TABL
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE15     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     3
SE37
SE38     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     FUGR,PROG
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE93     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     TRAN
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE41     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE43     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     3
SE43N     S_DEVELOP     DevClass      '
          ObjectType      '
          ObjectName      '
          P_Group      '
          Actvt     01,02
SE51     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     FUGR,PROG,DYNP
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE80     S_DEVELOP     DevClass     T,Y,Z*
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE81     S_DEVELOP     DevClass     *
          ObjectType     *
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE82     S_DEVELOP     DevClass     Y,Z
          ObjectType     APPLTREE
          ObjectName     *
          P_Group     *
          Actvt     01,02
SE91
SE92
SE92N
SNRO     S_NUMBER     NROBJ     *
          Actvt     02,17,11
SQ00     S_QUERY     Actvt     02,23
SQ01     S_QUERY     Actvt     02,23
SQ02     S_QUERY     Actvt     02,23
SQ03     S_QUERY     Actvt     23
SQVI
SM35     S_BDC_MONI     BDCAKTI     ABTC,AONL,DELE
SM35P     S_BDC_MONI     BDCAKTI     ANAL
SM36     S_BTCH_ADM     BTCADMIN     Y
SM37     S_BTCH_JOB     Jobaction     PROT,SHOW
          Jobgroup     *
SM39
SM62
SM64     S_BTCH_ADM     BTCADMIN     Y
SE01     S_CTS_ADMI     CTS_ADMFCT     EPS1,EPS2,PROJ
     S_TRANSPRT     Actvt     *
          Ttype     *
SE06     S_C_FUNCT     PROGRAM     SAPLSTRF,SAPLSTRI
          CFUNCNAME     SYSTEM
          ACTVT     16
     S_TRANSPRT     Actvt     43,60,65
          Ttype     *
SE09     S_TRANSPRT     Actvt     43,60,65
          Ttype     *
     S_CTS_ADMI     CTS_ADMFCT     EPS1,EPS2,PROJ
SE10     S_TRANSPRT     Actvt     43,60,65
          Ttype     *
     S_CTS_ADMI     CTS_ADMFCT     *
SPAM     S_CTS_ADMI     CTS_ADMFCT     IMPA,IMPS
     S_TRANSPRT     Actvt     43,60,65
          Ttype     PATC,PIEC
STMS     S_CTS_ADMI     CTS_ADMFCT     *
     S_RFC     Actvt     16
          RFC_NAME     EPSF,STPA
          RFC_TYPE     FUGR
Edited by: rameshbabu muddana on Mar 2, 2009 10:56 AM

hi,thanks for reply "you should not care about the transaction start s_tcode at all - only check the object required"
It has made manditory policy to check for users and roles every month with given criteria of Tcode and object,now i have been given the task to check the combination of Tcode and object value combination are correct or not,please validate the combinations and suggest,we are using ECC 5.0,i had gone through wild card use (#) when we check in SUIM,i am getting confused that when i give # followed by value, data i am getting different from without #.please provide an example for SE16 with S_TABU_DIS
how to check?
i am checking in this way
S_TCODE       SE16
S_TABU_DIS
Activity
Value 01or 02
Authorization Group
Value #&NC&

Looking for an Internal ISO Audit SharePoint solution

I am in the process of totally revamping my entire QMS integrating the use of SharePoint. I was in the process of designing a module to manage my internal audit schedule, reports, findings, and CARs and wanted to ask if anyone had a free canned version
I could start with. I have seen a few out there for sale and I'm not interested in buying anything. Please let me know if you can help me. NO SPAM!!!

Hi,
According to your description, you are looking for an free Internal ISO Audit SharePoint solution.
Please Check whether the following is helpful:
http://www.iso9001help.co.uk/basic-internal-audit-checklist.html
http://www.mastercontrol.com/iso13485/ISO_13485_Audit_Checklist.html
Besides, there are some with free trial, you can have a look at:
http://www.isoxp.com/10Products/ISO14ChkList.aspx
http://www.varonis.com/solutions/by-role/sharepoint.html
Best Regards,
Lisa Chen
Lisa Chen
TechNet Community Support

What exactly the auditing team will or should check in my database.

Dear all,
i am using oracle 10g database on windows server 2003 and oracle application server 10g on windows server 2003.
now an internal auditing team is going to audit my database.
i want to know what they will audit so that i do preparation for it.
thanks

i am using oracle 10g database on windows server 2003 and oracle application server 10g on windows server 2003.
now an internal auditing team is going to audit my database.
i want to know what they will audit so that i do preparation for it.
There is no way to know without knowing what type of 'audit' they are going to audit for.
1. access security? who has access to the physical hardware? how is that access managed (granted/revoked/documented)?
2. data security? who has access to the data in the database? how is that access managed? what levels of access are implemented?
3. financial? what controls are in place to monitor/log/track transactions that affect security has been implemented
The biggest step you can take to 'prepare' is to either find, or create, documentation about the system components.
ANYTHING that you tell them that isn't backed up by company approved and documented procedures is a security risk. No competent auditor is simply going to take anyone's word for an issue that is part of an audit.
The next step you can take is to be prepared to DEMONSTRATE that what you describe has, in fact, been implemented.
The third step during the actual audit is DON'T LIE! If you don't know an answer just say so. If a particular feature hasn't been implemented, or you know it has problems, just say so. Remember - anything you say can be EASILY verified if they choose to do so.
Get caught in a lie and you WILL pay the price, one way or the other.
There are reasons management has decided to audit your database. You may, or may not, know what those reasons are. If they are looking to dump you they are going to dump you no matter how good the audit turns out. But if they are looking for problem areas that need to be corrected this is your opportunity to make them aware of those areas since that can be used to justify getting the money you need to address them.
Got no backup server? That risks losing valuable corporate data and causing problems for users. So document that there is no backup server and the risks involved. That gives you a chance to seek money for a backup server. And so on. Use the audit as an opportunity to make a sales pitch for needing new hardware, software and people to get the job done.

Analysing Task Audit, Data Audit and Process Flow History

Hi,
Internal Audit dept has requested a bunch of information, that we need to compile from Task Audit, Data Audit and Process Flow History logs. We do have all the info available, however not in a format that allows proper "reporting" of log information. What is the best way to handle HFM logs so that we can quickly filter and export required audit information?
We do have housekeeping in place, so the logs are partial "live" db tables, and partial purged tables that were exported to Excel to archive the historical log info.
Many Thanks.

I thought I posted this Friday, but I just noticed I never hit the 'Post Message Button', ha ha.
This info below will help you translate some of the information in the tables, etc. You could report on it from the Audit tables directly or move them to another appropriate data table for analysis later. The concensus, though I disagree, is that you will suffer performance issues if your audit tables get too big, so you want to move them periodically. You can do this using a scheduled Task, manual process, etc.
I personally just dump it to another table and report on it from there. As mentioned above, you'll need to translate some of the information as it is not 'human readable' in the database.
For instance, if I wanted to pull Metadata Load, Rules Load, Member List load, you could run a query like this. (NOTE: strAppName should be equal to the name of your application .... )
The main tricks to know at least for task audit table are figuring out how to convert times and determing which activity code corresponds to the user friendly name.
-- Declare working variables --
declare @dtStartDate as nvarchar(20)
declare @dtEndDate as nvarchar(20)
declare @strAppName as nvarchar(20)
declare @strSQL as nvarchar(4000)
-- Initialize working variables --
set @dtStartDate = '1/1/2012'
set @dtEndDate = '8/31/2012'
set @strAppName = 'YourAppNameHere'
--Get Rules Load, Metadata, Member List
set @strSQL = '
select sUserName as "User", ''Rules Load'' as Activity, cast(StartTime-2 as smalldatetime) as "Time Start",
      cast(EndTime-2 as smalldatetime) as ''Time End'', ServerName, strDescription, strModuleName
   from ' + @strAppName + '_task_audit ta, hsv_activity_users au
   where au.lUserID = ta.ActivityUserID and activitycode in (1)
        and cast(StartTime-2 as smalldatetime) between ''' + @dtStartDate + ''' and ''' + @dtEndDate + '''
union all
select sUserName as "User", ''Metadata Load'' as Activity, cast(StartTime-2 as smalldatetime) as "Time Start",
      cast(EndTime-2 as smalldatetime) as ''Time End'', ServerName, strDescription, strModuleName
   from ' + @strAppName + '_task_audit ta, hsv_activity_users au
   where au.lUserID = ta.ActivityUserID and activitycode in (21)
        and cast(StartTime-2 as smalldatetime) between ''' + @dtStartDate + ''' and ''' + @dtEndDate + '''
union all
select sUserName as "User", ''Memberlist Load'' as Activity, cast(StartTime-2 as smalldatetime) as "Time Start",
      cast(EndTime-2 as smalldatetime) as ''Time End'', ServerName, strDescription, strModuleName
   from ' + @strAppName + '_task_audit ta, hsv_activity_users au
   where au.lUserID = ta.ActivityUserID and activitycode in (23)
        and cast(StartTime-2 as smalldatetime) between ''' + @dtStartDate + ''' and ''' + @dtEndDate + ''''
exec sp_executesql @strSQLIn regards to activity codes, here's a quick breakdown on those ....
ActivityID     ActivityName
0     Idle
1     Rules Load
2     Rules Scan
3     Rules Extract
4     Consolidation
5     Chart Logic
6     Translation
7     Custom Logic
8     Allocate
9     Data Load
10     Data Extract
11     Data Extract via HAL
12     Data Entry
13     Data Retrieval
14     Data Clear
15     Data Copy
16     Journal Entry
17     Journal Retrieval
18     Journal Posting
19     Journal Unposting
20     Journal Template Entry
21     Metadata Load
22     Metadata Extract
23     Member List Load
24     Member List Scan
25     Member List Extract
26     Security Load
27     Security Scan
28     Security Extract
29     Logon
30     Logon Failure
31     Logoff
32     External
33     Metadata Scan
34     Data Scan
35     Extended Analytics Export
36     Extended Analytics Schema Delete
37     Transactions Load
38     Transactions Extract
39     Document Attachments
40     Document Detachments
41     Create Transactions
42     Edit Transactions
43     Delete Transactions
44     Post Transactions
45     Unpost Transactions
46     Delete Invalid Records
47     Data Audit Purged
48     Task Audit Purged
49     Post All Transactions
50     Unpost All Transactions
51     Delete All Transactions
52     Unmatch All Transactions
53     Auto Match by ID
54     Auto Match by Account
55     Intercompany Matching Report by ID
56     Intercompany Matching Report by Acct
57     Intercompany Transaction Report
58     Manual Match
59     Unmatch Selected
60     Manage IC Periods
61     Lock/Unlock IC Entities
62     Manage IC Reason Codes
63     Null

Fetching Audit log from sm20 tr-cd

Dear guys,
I am asking this question from quiet long time..
but no body replies with enough information....could somebody plz tell me,is this something vague job to do or my explanation is insufficient.?
i debugged the code at SM20 program too..but i could not observe the suitable FM to fetch audit log texts and put in Internal tableshortly.Even though i went thru SECU FGroup..saw audit log related FMs.
could somebody follow this post..i could reward points once i get answer for my question.
Thanks in advance.
ambichan

Hi,
You can activate the internal audit system by setting the audit log parameters as described in the following table :
Audit Log parameter settings Audit Log Parameter Set value to...
rsau/enable 1
rsau/local/file path to audit log file
rsau/max_diskspace/local maximum space to allocate for the audit files
rsau/selection_slots 3
rec/client ALL
Thanks,
Hamendra

Internla Audit Client

Hi All,
I urgent requirement. The requirement is a recent internal audit client have been requested to set the following parameter:
<b>Do you think there will be a big impact to Client if we set this setting in all SAP instances? Will it stop any of the roles from working?
Should it also be applied across Dev, QA and Prod? Or only prod?</b>
Auth/object_disabling_active to "N" in R/3.
Could you please let me know the impact of setting the parameter. Should it also be applied across Dev, QA and Prod? Or only prod?
What is the use of this parameter?
Please reply to me with your findings then we will apply the change.
Please suggest me.
Regards,
chandra.k
Message was edited by:
chandra reddy kotha

Hello Chandra,
You can use the transaction AUTH_SWITCH_OBJECTS to deactivate all authorization objects.
However to carry this out the value profile paramter of auth/object_disabling_active needs to be Y or not set. In case it is N then you cannot globally deactivate the authorization objects.
Please award points accordingly.
Regards.
Ruchit.

Audit Management in ECC

Hi,
I am new to audit management. Can anyone help with the following queries:
1. How to create notification for reminders to audit and CAPA ?
2. How to attach Excel Question List. The steps please.
3. How the calculation is being done and the formula being used for arriving at the RESULT.
4. Is there any document which can be referred other than help.sap.com ?
5.How is archieving done.
Thanks

Hi Keerthi,
Thanks a lot for your reply. Actually I am doing a implementation project for a client who requires Internal Audit management module. And they are having lots of requirement. The following are some of the entire lot.
1. Can you please share the steps for loading Question List in excel. Is a customisation required ?
2. Do you have any document as to how to calculate the result, How is the calculation happening?
3. How to send reminders for audit e.g. I want to sent reminders to the auditee, auditors 7 days prior to audit.
4. Is there a provision to configure Escalation mechanism for actions to be taken after audit in case they are not completed within a stipulated timeline ? If not what is the way out?
5. The client also wants Risk Management - They want to have the provision to know the impact, probability of occurrence and assess the risks of each activity.
Thanks a lot,
Mona

Ecc6.0- audit management

Hi,pls advise how to prepare internal audit schedue using audit management tool in ecc 6.0 audit?

As suggested in the T-Code PLMD_AUDIT, first you need to create AUDIT PLAN and then against this AUDIT PLAN assign AUDITS as per the schedule provided by the Client.
Audit Plan would be your Internal Audit Schedule and Audits would be the Departments for which Audits are scheduled. In the standard Layout for AUDIT PLAN, you would get the print out for the Internal Audit Schedule.
Best Regards,
K. Raghavendra Nayak

Auditing in Orchestrator, several questions

Hi everybody,
My customer demands auditing on who is starting a runbook via the Orchestration Console. In my test environment I enabled auditing via the command atlc.exe.
There are a few questions:
Where can I find information how much audit information is collected, is there a formula for that? I only can find the filesize of 200 MB.
Why is the username who has started the runbook via the Orchestration Console not in the audit logfiles? Technet say's the username is collected. (see technet website).
The logfiles says: "2014-Jan-06 10:45:01", "SERVERNAME","Runbookname","called runbookname"
So I only see the name of the server where the runbook ran, not even the computer I called it from. BTW, this is the runbookpublisher audit file. For bullet 2 I found a
solution . But this is only a workarround. The audit information behaves differently than described on technet.
Best regards,
Mark Slootweg

Hi Mark,
This should point you in the right direction. Let me know if you see any improvements that can be made or feature requests.
http://jmattivi.blogspot.com/2012/09/audit-jobs-started-from-orchestration.html
I actually need to update the post to add a change to the parsing PowerShell script to allow for any character via Here-String.
$RawResults = @'
<Published Data>
$MyObjectCol = @()
$Regex = [regex] '/*__%__'
$Results = $Regex.Split("$RawResults")
ForEach($Data in $Results)
Also, the internal auditing has had a bug that causes performance degradation (I forget off the top of my head what the exact issue was and to my knowledge has not been fixed yet).
Jon

SAP Netweaver Audit Management

Hi Experts,
What's the role to get the Netweaver Audit Management in NWBC.?
Thanks & Regards,
Ankit Mehta

Hi Patrick,
Thanks for the reply.
I am working on GRC 10.0.
I went thru that doc but I am talking about SAP Audit Management (AM) & not the Internal Audit Management (IAM).
If you have worked on Internal Audit Management then you might be knowing that we are creating Audit Proposal & Audit Plan Proposal & we are also transferring these two in Audit Management.
So, I am not able to see the Audit Management in frontend (NWBC) but able to access in the backend (SAP easy access).
To have a better understanding & to avoid confusion I am hereby copying the screen shots of IAM & AM.
1. IAM- Frontend (NWBC)
2. AM
In SAP Easy Access
Regards,
Ankit Mehta

Get SM20 Audit Log from remote call.

Hi Experts,
I'm working with SAP JCo driver, I'd like to ask, is there any possibility to receive filtered Audit Log from SM20?
I couldn't find any BAPI or RFC interface, or information about specific table where information is stored.
Thanks in advance!
Best regards
Bartosz

Hi,
You can activate the internal audit system by setting the audit log parameters as described in the following table :
Audit Log parameter settings Audit Log Parameter Set value to...
rsau/enable 1
rsau/local/file path to audit log file
rsau/max_diskspace/local maximum space to allocate for the audit files
rsau/selection_slots 3
rec/client ALL
Thanks,
Hamendra

HFM Security Access Edit Logs - Audit

I have been asked by our internal audit group to provide logs of when users access within HFM have been edited (i.e. added, changed roles, added to groups, etc.). Is there anyone else that has received this request, and more importantly how have you met this request (logs in the system, etc)?
The only way I have been able to track this is offline via spreadsheets.
Any/all advice is appreciated.
Thanks.
LJ
Edited by: user8357096 on Mar 23, 2010 7:28 AM

I have had a couple clients ask for something like this. At least now with user provisioning you can get reports of what the security was, like a snapshot. Then compare it to another time. But this will only tell you part of the story. If you are using groups for example, it possible a user gets added to one group then removed. You would not have access to that change in HFM, it would keep no record of it.
I would recommend taking and extract and report and archiving them to reference.

Audit Management-Audit Objects

Dear Experts,
i want to know how we can assign Audit Objects to an Audit Type.
for example i have created an Audit Type Internal audit. now i want to assign audit object to it. Can i add department in it instead of Vendor/Customer etc.
Regards
Kashif

Hi,
1. Audit plan to Audit
You can't assign Audit plan to Audit. Reverse is possible.
Assigning Audit to Audit Plan is possible - Right click on any Audit plan and choose 'Create -> Audit using template' for already existing audit components.
To assign new audit component, choose Create -> Audit'
2. Audit to Question list
You can't assign Audit to Question list.
Assigning Question list to Audit is possible - Right click on Audit component and choose ' Create -> Assign Question list'.
*You can not assign any question list without releasing it.
Once the Audit has been released you can not assign a question list.*
3. Audit to audit question list
Right click on Audit and choose 'Create -> Audit Question list/ question using template'.
4. Question list to Audit plan
You can't assign Question list to Audit Plan.
4. Question to corrective/preventive action
You can't assign question to CAPA.
You can assign CAPA to question - Right click on Question and choose 'Create -> Corrective/ Preventive action' OR 'Corrective/ Preventive using template'.
SAP audit management Please have a look at this link for detailed functionality.
http://help.sap.com/saphelp_crm40/helpdata/EN/2a/ea273aeaa07123e10000000a114084/content.htm
Regards,
Ram

Internal Auditing

Similar Messages

Maybe you are looking for