financial relevance in COF(Customer Onboarding Form)

[Youngdong]

Hello, I have question about item 'financial relevance' in COF(Customer Onboarding Form)

1. Should I check 'financial relevance' at system which contains production client(PRD system)? Isn't it required DEV or QAS? Sometimes QAS is copied from PRD with system copy or client copy.

2. If I check it, which service is provided by SAP? According to Help, it is for auditing purpose. So, who is subject of audit? does SAP execute audit? or preparing for audit by external organization?

[SeungwookJung]

Dear PCA, 

Thank you for uploading the questions to the forum. 

'Financially relevant' means identifying whether the system contains financially relevant information. This is required for auditing purposes. Once a production system is considered business live, all production systems that process or contain customer financial information must be identified, and the SOC1 audit of controls will include them.

1. It is not mandatory for QAS. But if the customer requires it for an audit, it could be marked as 'YES'.
   
   
2. SAP will provide the SOC1 report.
   It will only be sent if the customer requests it separately. Reports are not generated for a specific customer system

How to request SOC reports

1. SAP Trust Center > Compliance > System and Organization Controls (SOC)
2. Click 'SOC1 reports'
3. Click the latest version of 'SAP Enterprise Cloud Services SOC 1 Audit Report 20xx'.
4. Click 'Request a copy of the SAP Cloud Application Services SOC 1 Audit Report 20xx'
5. Please complete the required fields (e.g.,Name, Customer ID, SAP contact AE/CSP/CSM, etc.).
6. SAP audited organization will send the report directly to the customer.
   

Thank you.
Best Regards, Seungwook