SAP Audit Checklist: 15 Areas to Review
Use this checklist as a starting point for an SAP security and access audit.
- User master review
- Inactive users
- Privileged access
- Role assignments
- Authorization objects
- Critical transactions
- SoD conflicts
- User creation controls
- User change controls
- User deactivation
- Access approvals
- Emergency access
- Periodic access certification
- Audit evidence
- Management reporting
Turn the checklist into a repeatable process
A checklist is useful, but recurring audits benefit from a consistent system of analysis and reporting. SimpAudit helps teams move from checklist-based reviews toward structured SAP audit automation.