Most of the SAP customers have multiple systems and multiple environments. The system profiles have to be configured in each and every system. As the customer keeps adding new systems, system profile parameters must be matched as part of the internal auditor’s SAP Security Audit process. It becomes increasingly difficult for the internal audit team to keep track of which systems are non-compliant with the company’s SAP security audit policy. When the external auditor does a detailed review, they will compare the company policy requirement with parameters which are configured in the system and identify those which are non-compliant as part of their
