View CartView Cart
QuestionsContact Us

Expenditure Business Cycle - Audit Program and Testing Procedures for SAP R/3



This audit program is designed to help audit, risk and security professionals assess the Expenditure business process in SAP R/3 (links into the Financial (FI & CO) & the Logistics (SD, MM, PP) modules). This audit program will help you identify any inherent risks, minimize exposure to such risks, ensure that necessary controls are in place and operate effectively, and ascertain reliability of the SAP R/3 expenditure business cycle.

This audit program is based on the latest auditing standards. It contains a comprehensive listing of control objectives and recommended controls to meet the objectives. It also contains detailed testing procedures, rather than generic descriptions of the controls & the tests to be performed. You'll receive step-by-step directions on extracting the configurable options & user access reports from the system in support of individual control activities. The purpose of the testing instructions is to enable anyone to execute the tests & evaluate risks and controls in the SAP R/3 environment.

*NOTE* See below for more details. Also, use the "preview" icon below to view a part of the audit program to ensure it's right for you.

Audit Programs

Preview SAP Expenditure Audit ProgramThe audit program contains 73 tests designed to evaluate adequacy of the key configuration settings, monitoring techniques and access restriction mechanisms to sensitive transactions in SAP R/3 within the following expenditure sub-processes:

Purchasing - controls to ensure that purchase orders are entered accurately and (if purchasing function has been established) only placed for approved purchase requisitions:
  • Access to create, maintain, & release purchase orders, purchase requisitions and outline agreements (ME21, ME22, ME24, ME25, ME28, ME31, ME32, ME34, ME51, ME52, etc.)
  • Source list maintenance for specified materials (ME0M, ME06, etc.)
  • SAP R/3 release strategy for POs & purchase requisitions (OMGS, OMGQ, OME6, etc.
  • System edits for purchase requisitions, POs, outline agreements, & payment transactions (OMF2, OMEC, OMF4, OMED, OMF7, OMEF, OMFA, OMEU, OMRP, OMRQ, and more)
  • Tolerances and posting rules for price variance - PO versus Receipt (OMEU, OME0, etc.)
  • Tolerances/posting rules for PO/Invoice price and quantity variances (Invoice versus PO)
  • Goods received invoice verification and GR-based invoice verification (XK03, FBL1, etc.)
  • System edits for purchasing documents - doc. type, posting keys, tolerance groups, etc. (OBA7, OB28, OB41, OBC4, OBC5, OBA4, OB57, etc.) and more.
Processing Accounts Payable - controls to ensure that the amounts posted to the A/P represent goods/services received, accurately calculated and recorded; credit notes and other adjustments related to the A/P are accurately calculated, recorded and processed:
  • Access to maintain credit notes, invoices, credit memos, & recurring payments (F-41, F-43, MRHR, MRHG, FBD1, FBD1, MIRO, MR08, MR02, and more)
  • Exchange rate table, rounding units, foreign currency ratios (OB08, OB90, OBBS)
  • The Goods receipt/Invoice receipt (GR/IR) account (MB5S, MR11, FS10N)
  • Vendor pricing information (ME11, ME12, ME15, MEK1, MEK2, MEK4, etc.) and more.
Processing Disbursements - controls to ensure that disbursements are made for goods/ services received, accurately calculated, recorded, and distributed to the appropriate suppliers, etc.:
  • Editing payment run parameters & proposals, executing payment runs (F110, etc.)
  • Access to unblock vendors, release blocked invoices (FK05, MK05, XK05, MR02)
  • Alternative payee, one time vendor functions (LFA1 & LFM1, RFKABL00, etc.)
  • Edits/validations of the payment and order entry transactions and much more.
Maintaining Supplier and/or Vendor Master Files - controls to ensure validity, accuracy, and timeliness of changes to the vendor master files, etc.:
  • Access to maintain vendor master records (FK01-FK06, MK01-MK06, XK01-XK06)
  • Segregation/separation of duties within SAP R/3 expenditure functions
  • Monitoring changes to vendor master data and more.
Everything has been conveniently pre-documented with fill-in fields for company-specific information (entity name, date, data extracted from the system, etc.) which will allow you to proceed with your assessment immediately.

Please click here to view a part of the audit program to ensure it's right for you.


Price: $55.00 (Instant Download)



Add to Cart
View Cart