SAP Application Controls & Security Audit

Hiring for SAP Application Controls & Security Audit for Qatar

Project Duration: 2 months

Job Description

Application Controls – SAP Review of configuration master data controls transaction processing validations posting logic pricing credit management inventory movements production confirmations maintenance orders error handling custom developments and audit trails across all in-scope modules.

Application Controls – Winit Mobile Van Sales App Assessment of functional controls covering:

• Masters for pricing credit control promotions/schemes/FOC/discount
• Sales quantity collection/loading
• Sales execution
• Sales returns
• Van stock transfers unloading reserved stock handling
• Offline transactions
• Synchronization logic
• Exception handling
• Audit logs

Interface & Integration Controls Evaluation of SAP–Winit interfaces including:

• Completeness accuracy timeliness of data transfer
• Error handling and reconciliation controls
• Duplicate prevention
• Failed transaction monitoring

User Access & Security Review Detailed review of:

• User roles and privileges
• Segregation of duties conflicts
• Excessive access and super-user rights
• Shared IDs
• Access provisioning/de-provisioning
• Compliance with least-privilege principles across SAP and Winit

Fraud Risk & Misuse Assessment Identification of:

• Fraud-prone areas
• Override capabilities
• Manipulation risks in pricing quantities stock returns and transfers
• Collusion scenarios
• Assessment of compensating controls

Application Testing Scope

• Negative Path Testing: Invalid incomplete or incorrect transaction scenarios
• Abuse/Misuse Case Testing: Testing of potential intentional misuse or circumvention of controls
• Segregation of Duties (SoD) Testing: Identification and validation of conflicting roles and access combinations

Deliverables

• Executive Summary
• Detailed findings with risk ratings
• Root cause analysis
• Financial and operational impact assessment
• Remediation roadmap
• Role redesign recommendations
• Management action plan