100% found this document useful (1 vote)
1K views12 pages

Risk ID Risk Level Description of Risk Function 1

The document lists various risks related to unauthorized access and fraudulent activities in an SAP system. It includes risks such as unauthorized maintenance of planning data that could impact production, developers making unauthorized changes to programs, and users processing fake transactions for things like orders, invoices, and inventory adjustments to hide fraudulent activities. The risks are categorized as high risk and note which specific SAP transactions and functions they relate to.

Uploaded by

preeti singh
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
100% found this document useful (1 vote)
1K views12 pages

Risk ID Risk Level Description of Risk Function 1

The document lists various risks related to unauthorized access and fraudulent activities in an SAP system. It includes risks such as unauthorized maintenance of planning data that could impact production, developers making unauthorized changes to programs, and users processing fake transactions for things like orders, invoices, and inventory adjustments to hide fraudulent activities. The risks are categorized as high risk and note which specific SAP transactions and functions they relate to.

Uploaded by

preeti singh
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as XLSX, PDF, TXT or read online on Scribd
  • Risk Analysis
  • Function Mapping

Risk ID Risk Level Description of Risk Tc Function 1

A001 High Unauthorized maintenance of planning model and version may AO02 APO Maintain Model
adversely impact the production planning data stored in APO.
This transaction should be limited to selected demand planning
super user or manager.
A002 High Unauthorized deletion of active planning version may adversely AO03 APO Model & Version
impact the production planning data stored in APO. This Management
transaction should be limited to selected demand planning super
user or manager.
A003 High Unauthorized maintenance of planning model and version may AO04 APO active version)
adversely impact the production planning data stored in APO.
This transaction should be limited to selected demand planning
super user or manager.
A008 High Access to maintain macros/rules should be controlled via AO09 APO Define Advanced
change management process. Unsupported or incorrect Macros
adjustments are made to the macros/rules may result in
inaccurate production planning and production scheduling.
B002 High A developer could modify an existing program in production, BS02 Basis Development
perform traces to the program and configure the production
environment to limit monitoring of the program run by increasing
alarm thresholds and eliminating audit trails through external OS
comma
B004 High A developer could create or modify a program in production and BS02 Basis Development
force the transport of these changes after the fact to conceal
irregular development practices. This also enables the reverting
back to the program's original version without any trace of the
changes made in production.
B006 High A developer could modify program components (menus, screen BS04 Basis Utilities
layout, messages, queries) and configure the production
environment to limit monitoring of the program runs using the
modified program components by increasing alarm thresholds
and eliminating audit trail
B008 High A developer could modify program components (menus, screen BS04 Basis Utilities
layout, messages, queries) and force the transport of these
changes after the fact to conceal irregular development
practices. This also enables the reverting back to the program
components origin
B009 High An individual could modify data in tables or modify valid BS03 Basis Table Maintenance
configuration values and setup the production environment to
run transactions and programs using the inappropriately
modified data. This could affect data integrity, system
performance, and proper
B010 High An individual could modify data in tables or change valid BS03 Basis Table Maintenance
configuration and replicate these changes to other clients. This
is particularly sensitive if client administration transactions come
with client-independent authorization allowing the developer to

B011 High An individual could inappropriately modify roles and BS10 Security Administration
assignments and reflect this change to the production's mirror
copy eliminating the chance to revert to the appropriate setup.

B012 High A security administrator could make inappropriate changes to BS10 Security Administration
unauthorized security roles, transport them, and assign them to
a fictitious user for execution.
B017 High Can create transports, add objects to the transport, and move BS07 Create Transport
the transport: Can put unauthorized object changes into
production, bypassing the Change Control process.
B018 High Can reset the number ranges (1) and delete your log/audit trail BS08 Maintain Number Ranges
(2).
B019 High One person controlling both the access in the profile/role and the BS13 Maintain User Master
user Ids increases the risk of inappropriate access
D003 High A user could create a fictitious business partner and initiate CR03 Maintain Business Partner
fraudulent sales orders for that partner. Master data such as
business partners should not be maintained by the same users
who process transactions using that master data.
D004 High A user could create a fictitious sales order to cover up an CR04 Process CRM Sales Order
unauthorized shipment.
D005 High Inappropriately create or change sales documents and generate CR04 Process CRM Sales Order
the corresponding billing document in CRM.
D006 High Inappropriately create or change sales documents and generate CR04 Process CRM Sales Order
the corresponding billing document in R3.
D007 High Enter fictitious service orders for personal use and accept the CR05 Service Order Processing
services through service acceptance. The user could prompt
fraudulent payments. In addition spare parts could be
fraudulently issued from inventory as a result of the confirmation.

D008 High User can create a fictitious business partner and then process CR07 CRM Billing
billing in CRM for that partner.
D009 High User can create a fictitious business partner and then process AR05 Maintain Billing Documents
billing in R3 for that partner.
D010 High Inappropriately accept or confirm a service order and generate a CR06 Service Confirmation
corresponding billing document in CRM for the order.

D011 High Inappropriately accept or confirm a service order and generate a CR06 Service Confirmation
corresponding billing document in R3 for the order.

D013 High User could create a fictitious credit memo and run billing due in CR08 Process Credit Memo
CRM to prompt a payment to a customer. The customer could
provide a kickback to the internal user.
D014 High User could create a fictitious credit memo and run billing due in CR08 Process Credit Memo
R3 to prompt a payment to a customer. The customer could
provide a kickback to the internal user.
D015 High Pricing conditions could be manipulated to provide inappropriate AR07 Process Customer Invoices
discounts or incentives to customers which will be realized in an
incorrect invoice.
D016 High A user could enter a sales order in CRM and lower prices via CR04 Process CRM Sales Order
conditions for fraudulent gain
D017 High Commission or Incentives may be paid based on the number of CR02 Maintain Opportunity
qualified leads. Inappropriately qualified leads could result in
fraudulent commission payments.
D018 High Commission or Incentives may be paid based on the number of CR05 Service Order Processing
service orders. Fraudulent orders could be entered to achieve
higher sales for commissions.
D019 High Commission or Incentives may be paid based on the number of CR04 Process CRM Sales Order
sales orders. Fraudulent orders could be entered to achieve
higher sales reporting for commissions.
E001 High Maintain a fictitious vendor and enter an invoice to be included SR01 EBP / SRM Vendor Master
in the automatic payment run
E002 High Purchase unauthorized items and prompt the payment by SR02 EBP / SRM Purchasing
invoicing
E003 High Enter fictitious orders for personal use and accept the goods or SR02 EBP / SRM Purchasing
services through goods receipt or service acceptance

E004 High Enter fictitious invoices and accept goods or services via goods SR03 EBP / SRM Invoicing
receipt or service acceptance

E005 High Maintain a fictitious vendor and initiate purchases to that vendor. SR01 EBP / SRM Vendor Master

E010 High A user can hide differences between bank payments and posted FI03 Bank Reconciliation
AP records.
E011 High Accept goods via SRM goods receipts and perform a WM SR06 EBP / SRM Goods
physical inventory adjustment afterwards. Receipt/Service Acceptance

E012 High Accept goods via SRM goods receipts and perform IM physical SR06 EBP / SRM Goods
inventory adjustment afterwards. Receipt/Service Acceptance

E013 High Accept goods via SRM goods receipts and perform IM physical SR06 EBP / SRM Goods
inventory adjustment afterwards using powerful IM transactions Receipt/Service Acceptance

E014 High Enter fictitious orders for personal use and access the goods or SR02 EBP / SRM Purchasing
services through goods receipt
E015 High Enter fictitious orders for personal use and access the goods or SR02 EBP / SRM Purchasing
services through service acceptance
E019 High Approve the purchase of unauthorized goods and hide the SR07 EBP / SRM PO Approval
misuse of inventory by not fully receiving the order in R3
E020 High Where release strategies are utilized, the same user should not SR02 EBP / SRM Purchasing
maintain the purchase order and release or approve it.
E021 High Create a fictitious vendor or change existing vendor master data SR01 EBP / SRM Vendor Master
and approve purchases to this vendor
E022 High Enter fictitious orders for personal use and manipulate the SR02 EBP / SRM Purchasing
organizational structure to bypass approvals
E023 High Create or maintain fictitious vendor and manipulate the SR01 EBP / SRM Vendor Master
organizational structure to bypass approvals or secondary
checks
E024 High Initiate purchases to selecting goods to be included in a SR08 EBP / SRM Maintain
shopping cart then approving the purchase Shopping Cart
F005 High Create a non bona-fide bank account and create a check from it. FI04 Maintain Bank Master Data

F006 High Pay an invoice and hide it in an asset that would be depreciated FA01 Maintain Asset Document
over time.
F007 High Create an invoice through ERS goods receipt and hide it in an FA01 Maintain Asset Document
asset that would be depreciated over time.
F008 High Allows differences between cash deposited and cash collections AR02 Cash Application
posted to be covered up
F013 High Create the asset and manipulate the receipt of the associated FA02 Maintain Asset Master
asset.
F014 High Post overhead expenses to the project and settle the project PS02 Process Overhead Postings
without going through the settlement approval process.
F015 High Use a fictitious project to allocate overages of an actual project, PS01 Maintain Projects and WBS
and settle the project without going through the settlement Elements
approval process.
F016 High Manipulate the work breakdown structure elements (profit PS01 Maintain Projects and WBS
centers, business areas, cost centers, plants) and post overhead Elements
expenses to the project
F017 High Maintain a non bona-fide bank account and divert incoming FI04 Maintain Bank Master Data
payments to it.
F025 High Create a non bona-fide bank account and create manual checks FI04 Maintain Bank Master Data
from it
F027 High Users can create a fictitious trade and fraudulently confirm or FI08 Create / Change Treasury
exercise the trade Item
G001 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G002 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G003 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G004 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G005 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G006 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G007 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G008 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G009 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G010 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G011 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G012 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G013 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
G014 High AP/AR/GL master data creation and posting functions in EC01 Maintain Hierarchies
conjunction with payment processing, receipt of money, GL
account access; and the ability to modify ECCS hierarchy and
reporting output
H001 High Modify payroll master data and then process payroll. Potential HR03 Maintain Employee (PA)
for fraudulent activity. Master Data - 0008 - 0009 (

H002 High Change employee HR Benefits then process payroll without HR01 HR Benefits
authorization. Potential for fraudulent activity.
H003 High Change to master data and creating the remittance could result PY07 3rd Party Remittance
in fraudulent payments.
H004 High Change payroll master data and enter time data applied to HR04 Maintain Time Data
incorrect settings.
H005 High Modify time data and process payroll resulting in fraudulent HR04 Maintain Time Data
payments
H006 High Change configuration of payroll then process payroll resulting in PY02 Maintain Payroll
fraudulent payments Configuration
H007 High Change configuration of payroll then modify payroll master data HR03 Maintain Employee (PA)
resulting in fraudulent payments Master Data - 0008 - 0009 (

H008 High Change payroll master data and modify PD Structure HR05 Modify PD Structure

H009 High Enter false time data and perform payroll maintenance. HR04 Maintain Time Data
H010 High Change payroll and process payroll without proper authorization. PY03 Payroll Maintenance

H011 High Change payroll configuration and perform maintenance on PY02 Maintain Payroll
payroll settings. Configuration
H012 High Modify payroll configuration and enter false time data. HR04 Maintain Time Data

H013 High Enter false time data and maintain PD structure HR04 Maintain Time Data
H014 High Users may enter false time data and process payroll resulting in HR03 Maintain Employee (PA)
fraudulent payments. Master Data - 0008 - 0009 (

H015 High Users may maintain employee master data including pay rates HR03 Maintain Employee (PA)
and delete the payroll result Master Data - 0008 - 0009 (

H016 High Users may enter false time data and perform work schedule PY06 Payroll Schemas
evaluations
M006 High Accept goods via goods receipts and perform a WM physical MM04 Goods Movements
inventory adjustment afterwards.
M011 High Accept goods via goods receipts and perform an IM physical MM04 Goods Movements
inventory adjustment afterwards.
M012 High Accept goods via goods receipts and perform an IM physical MM04 Goods Movements
inventory adjustment afterwards.
P001 High Maintain a fictitious vendor and enter a Vendor invoice for PR01 Vendor Master Maintenance
automatic payment
P002 High Maintain a fictitious vendor and create a payment to that vendor AP01 AP Payments

P003 High Enter fictitious vendor invoices and then render payment to the AP02 Process Vendor Invoices
vendor
P004 High Purchase unauthorized items and initiate payment by invoicing PR02 Maintain Purchase Order

P005 High Enter fictitious purchase orders for personal use and accept the PR02 Maintain Purchase Order
goods through goods receipt
P006 High Enter fictitious vendor invoices and accept the goods via goods AP02 Process Vendor Invoices
receipt
P007 High Enter a fictitious purchase order and enter the covering payment PR02 Maintain Purchase Order
P008 High Create a fictitious vendor and initiate purchases to that vendor PR01 Vendor Master Maintenance

P011 High Inappropriately procure an item and manipulating the IM PR02 Maintain Purchase Order
physical inventory counts to hide.
P014 High Can hide differences between bank payments & posted AP FI03 Bank Reconciliation
records
P016 High Receive or accept services and enter the covering payments PR08 Service Acceptance
P019 High Approve the purchase of unauthorized goods and hide the PR04 PO Approval
misuse of inventory by not fully receiving the order
P020 High Commit the company to fraudulent purchase contracts and PR04 PO Approval
initiate payment for unauthorized goods and services.
P021 High Release a non bona-fide purchase order and initiate payment for PR04 PO Approval
the order by entering invoices
P022 High Release a non bona-fide purchase order and the action remain PR04 PO Approval
undetected by manipulating the IM physical inventory counts

P023 High Create a fictitious vendor or change existing vendor master data PR04 PO Approval
and approve purchases to this vendor
P026 High Enter fictitious purchasing agreements and then render payment AP01 AP Payments

P027 High Risk of entry of fictitious Purchasing Agreements and the entry PR01 Vendor Master Maintenance
of fictitious Vendor or modification of existing Vendor especially
account data.
P028 High Modify purchasing agreements and then receive goods for PR05 Purchasing Agreements
fraudulent purposes.
P029 High Enter unauthorized items to a purchasing agreement and create AP02 Process Vendor Invoices
an invoice to obtain those items for personal use
P030 High Risk of modifying service master data (to add a service that is AP01 AP Payments
normally not ordered by the company) and the entry of covering
payments
P038 High Risk of entering unauthorized payments and reconcile with the AP01 AP Payments
bank through the same person.
P045 High Inappropriately procure an item and manipulating the IM PR02 Maintain Purchase Order
physical inventory counts to hide.
P046 High Inappropriately procure an item and manipulating the WM PR02 Maintain Purchase Order
physical inventory counts to hide.
P047 High Release a non bona-fide purchase order and the action remain PR04 PO Approval
undetected by manipulating the IM physical inventory counts

P048 High Release a non bona-fide purchase order and the action remain PR04 PO Approval
undetected by manipulating the WM physical inventory counts

P051 High Maintain a fictitious vendor and create a payment to that vendor AP04 Manual Check Processing

P052 High Enter fictitious vendor invoices and then render payment to the AP02 Process Vendor Invoices
vendor
P053 High Enter a fictitious purchase order and enter the covering payment PR02 Maintain Purchase Order

P054 High Receive or accept services and manually enter the covering PR08 Service Acceptance
check payments
P055 High Commit the company to fraudulent purchases and initiate PR04 PO Approval
manual check payments for unauthorized goods and services.

P056 High Enter fictitious purchasing agreements and then render manual AP04 Manual Check Processing
checks for payment
P057 High Risk of modifying service master data (to add a service that is AP04 Manual Check Processing
normally not ordered by the company) and the entry of covering
payments
P058 High Risk of entering unauthorized manual payments and reconcile AP04 Manual Check Processing
with the bank through the same person.
P059 High Where release strategies are utilized, the same user should not PR02 Maintain Purchase Order
maintain the purchase order and release or approve it.
S001 High Enter or modify sales documents and approve customer credit AR04 Credit Management
limits
S002 High Create sales documents and immediately clear customer's SD05 Sales Order Processing
obligation
S003 High Create a fictitious customer and initiate fraudulent sales SD05 Sales Order Processing
document
S004 High Make an unauthorized change to the master record (payment SD01 Maintain Customer Master
terms, tolerance level) in favor of the customer and enter an Data
inappropriate invoice.
S005 High Inappropriately create or change rebate agreements and SD01 Maintain Customer Master
manage a customer's master record in the favor of the customer. Data
Could also change a customer's master record to direct payment
to an inappropriate location.
S006 High Potentially clear a customer's balance before and create or AR03 Clear Customer Balance
make the same change to the billing document for the same
customer, clearing them of their obligation.
S007 High Inappropriately create or change a sales documents and SD05 Sales Order Processing
generate a corresponding billing document for it.
S008 High Manipulate the user's credit limit and assign generous rebates to AR04 Credit Management
execute a marginal customer's order.
S010 High Create a billing document for a customer and inappropriately AR02 Cash Application
post a payment from the same customer to conceal non-
payment.
S011 High Create a fictitious customer and initiate payment to the SD01 Maintain Customer Master
unauthorized customer. Data
S012 High Initiate an unauthorized payment to the customer by entering AR06 Process Customer Credit
fictitious credit memos. Memos
S013 High Change the accounts receivable records to cover differences AR02 Cash Application
with customer statements.
S014 High Cover up unauthorized shipment by creating a fictitious sales SD05 Sales Order Processing
documents
S015 High Sales price modifications for sales invoicing. AR07 Process Customer Invoices

S016 High Enter sales documents and lower prices for fraudulent gain SD05 Sales Order Processing
S017 High Perform credit approval function and modify cash received for AR04 Credit Management
fraudulent purposes.
S018 High Enter a fictitious sales rebates and then render fictitious AR02 Cash Application
payments.
S019 High Risk of the same person entering changes to the Customer AR02 Cash Application
Master file and modifying the Cash Received for the customer.

S022 High Risk of modifying and entering Sales Invoices and approving AR07 Process Customer Invoices
Credit Limits by the same person.
S023 High Risk of Sales Price modifications for Sales invoicing. AR05 Maintain Billing Documents

S024 High Maintain a customer master record and post a fraudulent SD01 Maintain Customer Master
payment against it Data
S025 High User can create a fictitious customer and then issue invoices to SD01 Maintain Customer Master
the customer. Data
S026 High User can create/change an invoice and enter/change payments AR02 Cash Application
against the invoice.
S027 High User can create fictitious/incorrect delivery and enter payments SD02 Delivery Processing
against these, potentially misappropriating goods.
S028 High User able to create a fraudulent sales contract to include SD05 Sales Order Processing
additional goods and enter an incorrect customer invoice to hide
the deception.
S029 High Create a credit memo then clear the customer to prompt a AR03 Clear Customer Balance
payment.
Tc Function 2 Tc Function 3
AO01 APO Supply & Demand
Planning

AO01 APO Supply & Demand


Planning

AO01 APO Supply & Demand


Planning

AO01 APO Supply & Demand


Planning

BS06 Configuration

BS12 Transport Administration

BS06 Configuration

BS12 Transport Administration

BS11 System Administration

BS05 Client Administration

BS05 Client Administration

BS12 Transport Administration

BS09 Perform Transport

BS11 System Administration

BS14 Maintain Profiles / Roles

CR04 Process CRM Sales Order

SD02 Delivery Processing

CR07 CRM Billing

AR05 Maintain Billing Documents


CR06 Service Confirmation

CR03 Maintain Business Partner

CR03 Maintain Business Partner

CR07 CRM Billing

AR05 Maintain Billing Documents

CR07 CRM Billing

AR05 Maintain Billing Documents

CR09 Maintain Conditions

CR09 Maintain Conditions

PY04 Process Payroll

PY04 Process Payroll

PY04 Process Payroll

SR03 EBP / SRM Invoicing

SR03 EBP / SRM Invoicing

SR04 EBP / SRM Goods


Receipt/Service Acceptance

SR04 EBP / SRM Goods


Receipt/Service Acceptance

SR02 EBP / SRM Purchasing

SR03 EBP / SRM Invoicing

MM07 Enter Counts - WM MM08 Clear Differences - WM

MM02 Enter Counts - IM MM01 Clear Differences -


Inventory Management

MM03 Enter Counts & Clear Diff -


IM

MM05 Goods Receipts to PO

PR08 Service Acceptance

MM05 Goods Receipts to PO

SR07 EBP / SRM PO Approval

SR07 EBP / SRM PO Approval

SR09 EBP / SRM Maintain Org


Structure
SR09 EBP / SRM Maintain Org
Structure

SR07 EBP / SRM PO Approval

AP01 AP Payments

AP02 Process Vendor Invoices

MM05 Goods Receipts to PO

FI03 Bank Reconciliation

MM05 Goods Receipts to PO

PS03 Settle Projects

PS03 Settle Projects

PS02 Process Overhead Postings

AR02 Cash Application

AP04 Manual Check Processing

FI09 Confirm a Treasury Trade

AP01 AP Payments

AP02 Process Vendor Invoices

AP04 Manual Check Processing

AR02 Cash Application

AR07 Process Customer Invoices

CC03 Maintain Cost Centers

FA01 Maintain Asset Document

FA02 Maintain Asset Master

FI01 Revenue Reposting

GL01 Post Journal Entry


GL02 Maintain GL Master Data

GL03 Post Journal Entry (misc


Tax/Currency)

PR01 Vendor Master Maintenance

SD01 Maintain Customer Master


Data

PY04 Process Payroll

PY04 Process Payroll

HR02 HR Vendor Data

PY01 Approve Time

PY04 Process Payroll

PY04 Process Payroll

PY02 Maintain Payroll


Configuration

HR03 Maintain Employee (PA)


Master Data - 0008 - 0009 (

PY03 Payroll Maintenance


PY04 Process Payroll

PY03 Payroll Maintenance

PY02 Maintain Payroll


Configuration
HR05 Modify PD Structure
HR04 Maintain Time Data

PY03 Payroll Maintenance

HR04 Maintain Time Data

MM07 Enter Counts - WM MM08 Clear Differences - WM

MM02 Enter Counts - IM MM01 Clear Differences -


Inventory Management
MM03 Enter Counts & Clear Diff -
IM
AP02 Process Vendor Invoices

PR01 Vendor Master Maintenance

AP01 AP Payments

AP02 Process Vendor Invoices

MM05 Goods Receipts to PO

MM05 Goods Receipts to PO

AP01 AP Payments
PR02 Maintain Purchase Order

MM03 Enter Counts & Clear Diff -


IM
AP02 Process Vendor Invoices

AP01 AP Payments
MM05 Goods Receipts to PO

AP01 AP Payments

AP02 Process Vendor Invoices

MM02 Enter Counts - IM MM01 Clear Differences -


Inventory Management

PR01 Vendor Master Maintenance

PR05 Purchasing Agreements

PR05 Purchasing Agreements

MM05 Goods Receipts to PO

PR05 Purchasing Agreements

PR03 Service Master Maintenance

FI03 Bank Reconciliation

MM02 Enter Counts - IM MM01 Clear Differences -


Inventory Management
MM07 Enter Counts - WM MM08 Clear Differences - WM

MM03 Enter Counts & Clear Diff -


IM

MM07 Enter Counts - WM MM08 Clear Differences - WM

PR01 Vendor Master Maintenance

AP04 Manual Check Processing

AP04 Manual Check Processing

AP04 Manual Check Processing

AP04 Manual Check Processing

PR05 Purchasing Agreements

PR03 Service Master Maintenance

FI03 Bank Reconciliation

PR04 PO Approval

SD05 Sales Order Processing

AR03 Clear Customer Balance

SD01 Maintain Customer Master


Data
AR07 Process Customer Invoices
SD03 Sales Rebates

AR05 Maintain Billing Documents

AR05 Maintain Billing Documents

SD03 Sales Rebates

AR05 Maintain Billing Documents

AR01 AR Payments

AR01 AR Payments

SD04 Sales Document Release

SD02 Delivery Processing

SD06 Sales Pricing Condition

SD06 Sales Pricing Condition


AR02 Cash Application

SD03 Sales Rebates

SD01 Maintain Customer Master


Data

AR04 Credit Management

SD06 Sales Pricing Condition

AR03 Clear Customer Balance

AR05 Maintain Billing Documents

AR07 Process Customer Invoices

AR02 Cash Application

AR07 Process Customer Invoices

AR06 Process Customer Credit


Memos

Risk ID
Risk Level
Description of Risk
Tc
Function 1
A001
High
AO02
APO Maintain Model
A002
High
AO03
A003
High
AO04
APO acti
D007
High
CR05
Service Order Processing
D008
High
CR07
CRM Billing
D009
High
AR05
Maintain Billing Documents
D010
High
CR06
S
E023
High
SR01
EBP / SRM Vendor Master
E024
High
SR08
F005
High
Create a non bona-fide bank account and create a check from i
G011
High
EC01
Maintain Hierarchies
G012
High
EC01
Maintain Hierarchies
G013
High
EC01
Maintain Hierarchies
G014
High
EC01
Ma
P008
High
Create a fictitious vendor and initiate purchases to that vendor
PR01
Vendor Master Maintenance
P011
High
PR02
Main
S005
High
SD01
S006
High
AR03
Clear Customer Balance
S007
High
SD05
Sales Order Processing
S008
High
AR04
Credit Management
S
Tc
Function 2
Tc
Function 3
AO01
AO01
AO01
AO01
BS06
Configuration
BS12
Transport Administration
BS06
Configuration
BS12
Tran
CR06
Service Confirmation
CR03
Maintain Business Partner
CR03
Maintain Business Partner
CR07
CRM Billing
AR05
Maintain Billin
SR09
SR07
EBP / SRM PO Approval
AP01
AP Payments
AP02
Process Vendor Invoices
MM05 Goods Receipts to PO
FI03
Bank Reconciliat
GL02
Maintain GL Master Data
GL03
PR01
Vendor Master Maintenance
SD01
PY04
Process Payroll
PY04
Process Payroll
HR02
HR Vendo

You might also like