topic Re: SOD in Application Development and Automation Discussions

SOD

Former Member — Fri, 20 Jul 2007 08:57:18 GMT

Hi,

Can any please provide me an document which will enable me to understand the concept of SOD. Also, please provide me the documents to understand the business level transactions to understand the SOD in a better way. Its urgent: My mail ID is

dvramakrishna@gmail.com

Re: SOD

Former Member — Fri, 20 Jul 2007 09:04:04 GMT

There are lots of resources out there if you use the search

High Level Overview

http://accounting.rutgers.edu/raw/aies/www.bus.orst.edu/faculty/brownc/lectures/controls/control1.htm

SAP specific stuff

http://www.sapsecurityonline.com/sox_sod/sox_sod.htm

Matrix of SoD's (this is a copy of the one in the ASAP template but the file doesn't appear to mention that)

http://www.sapsecurityonline.com/sox_sod/SodMatrix.xls

The file has conflicting functions & you need to map your ins cope transactions against those functions.

Message was edited by:

Alex Ayers

Re: SOD

Former Member — Mon, 30 Jul 2007 05:16:39 GMT

Dear Alex,

Thanks for providing the link. But actually I want to have documents that are released by SAP on

SOD. Please upload to my mail if there available withany one of you.

Thanks in Advance,

Ramakrishna.

Re: SOD

Former Member — Mon, 30 Jul 2007 06:52:42 GMT

As I said in my previous reply:

Matrix of SoD's (this is a copy of the one in the ASAP template but the file doesn't appear to mention that)

http://www.sapsecurityonline.com/sox_sod/SodMatrix.xls

The file has conflicting functions & you need to map your ins cope transactions against those functions.

That is the SOD matrix supplied by SAP in the ASAP methodology

There is also this book from SAP Press which covers some of the controls that you would expect to see if your company needs to meet SOX

http://www.sap-press.com/product.cfm?account=&product=H1959&shoppingcart=003

If I find any more links or docs I will post them up on here. In the interests of sharing knowledge via this community I'm not willing to email stuff to people & won't share any information with an individual that I wouldn't feel comfortable posting here.