on 2015 Apr 16 12:00 PM
I know that this is not available as a starting point...
But any ideas from SAP for any workarounds or future EHP or other planning methods to close this issue?
How it can be SOX compliant if anyone goes into KP26, do the changes, and business has no trace about them. This is actually quite common to many planning functions in ECC.
Maybe there is a solution that I am just not aware about?
Thank you,
Request clarification before answering.
Hi Paulo,
From SOX point of view you have preventive and detective controls. With preventive controls you assure (via authorizations) that not "anyone" but only authorized persons can change planned values.
For example, you can have several business controllers to prepare planning data but only one SAP user to upload them in SAP or plan manuály upon a trackable request. This is the proces part.
For detective controls you can use e.g. records from tables COEJL or report KSBP.
Edit: if you have SAP transaction logging on you can at least track who and when run KP26.
...and edit 2 : SOX is not blaming you if virtually "anyone" can change the data. At the beginning you should have safe processes in place. Hence, if you say that this or that gang of folks is fully authorized for certain operation, well trained and responsible then let them do and use SAP to support the process technically. Hence, focus (at first) on who and why can do it rather than how to prevent unauthorized users from doing so or how to track if it has been done so. Well, in ideal world you should have both...
hope this helps,
John
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
I personally do not know any single SAP client doing transaction logging for users... Many people goto KP26 just to display the data instead of using KP27 (I know that's the process issue again).
Business and system processes are the first priority, no doubt about it, but I was really after detective controls. SAP has change documents for virtually any master data (that often is not even business critical), but for financial transactional data in planning it does not.
Only in PS I can manage plan changes through a claims process, but not in KP26. The problem is that many companies do not calculate actual prices with KSII, so this plan data becomes actual financial data.
I tried using the Audit Trail tool but changes at KP26 aren't showing up. I was hoping that AUT10 would track this but it's not (in my system).
You should look at this link and present this issue. The PS group in Walldorf is taking requests for new development ideas.
Dear Paulo,
I would like to share some special information with you:
You could active the change logs "log data changes"in SE11 and then check in transaction SCU3 for the logs if any changes took place. Please use the table COST.
Logging only takes place if parameter rec/client in the system profile
is set correctly. See SAP note 1916 for further details.
Also setting SCC4 for the client of below should also be necessary.
Changes without automatic changes and Changes to Repository and cross-client customzing allowed.
Best regards,
Jason
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
To see "who changed" information in KP26, in KP26/27, click on the cell that hold the value that changed - do not select the line; then click on the button "line items" you will see: who, when and what was changed.
Regards
Althea
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.
Paulo,
I did some looking, these changes are not in the Change header table. It appears that it is considered a CO update and that header record is in COBK, the pricing would be in the line item table - which I have not been able to identify.
You won't find an "old value" "new: value" in this table
In the line item table (??) I think you will find a list of prices with the periods the price was valid.
hope this helps
Althea
Added: Table COEJT has the price for Activity types. It is stored by Document number.
Message was edited by: Althea Madigan
User | Count |
---|---|
98 | |
16 | |
6 | |
5 | |
5 | |
4 | |
4 | |
3 | |
3 | |
2 |
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.