How are you tracking ISO 9001/14001/18001 audits in SAP?

[ingo_gulde]

I am looking for customers that manage their audits in SAP. My US-based customer is interested in looking at examples of how other customers track ISO 9001/14001/18001 audits in SAP. If you are a such a customer or know of someone, please reply. Thanks!

[Former Member · Accepted solution]

Hi Ingo,

Different ISO requirements propose different guidelines for managing the processes and procedures. The 'management' part of ISO guidelines covers many aspects which can't be obviously brought under the ambit of IT soutions. However, all of the mentioned ISO's usually follow general auditing process of Audit Plan-->Audit Execution--> Audit Evaluation (Qualitative/Quantitative scoring)-->CAPA (corrective & preventive actions).  The auditing elements may be different e.g. product qulity, equipment reliability, housekeeping, Permits, fire extinguishers, SOP/SMPs etc, but these steps more or less remain the same (at times only differing in the nomenclature of auditing steps and audit report template). What remains common is the pain point of a LOB manager/ HSE head/ COO/ CEO to track all these CAPA's for logical closure in a single view dashboard/reporting.

This is where SAP's centralized solution of Audit management can help as it has flexible provisions of integrating with existing SAP objects across many modules. I have done few implemetations for chemical and Oil & Gas clients.

Regards,

Pavan

[ingo_gulde · Accepted solution]

Thank you for your answer. Which Audit Mgmt solution are your referring to? Classic PLM Audit Mgmt or the new GRC Audit Mgmt.?

[Former Member · Accepted solution]

Hi Ingo,

I am referring to Classic PLM Audit Mgmt solution only.

Regards,

Pavan

[christoph_bergemann · Accepted solution]

Dear Ingo

I don't know the "GRC Audit Mngt.  But I know about "GRC". The GRC stuff is a "add" on requirement; in my opinion (not having any knowledge about SAP solution) I would assume that you can use as well the "classic" Audit solution. The reason is quite "simple":

GRC is an "additional framework" to establish in a company based on internal rules and rules from outside; As explained by Pavan: the main idea is (by using SAP Audit): you plan audits, you document audits, you "control" audtis etc. And GRC topics are only add on requiremenst.

IN any case: Audit Management Software | Audit & GRC | SAP HANA | SAP

Coould be of interest. Same like: Governance, Risk and Compliance Solutions | Technology | SAP

and by hazard (as mentioned;: just google) I found this book: Auditing and GRC Automation in SAP | Maxim Chuprunov | Springer

Hope this helps.

C.B.

[VKK]

Dear ingo.gulde,

I am having the same requirement to implement ISO 50001 standard process in SAP.

I wish to know whether any SAP standard module / component available as tool to cover all / major ISO standards processes.

Can you help me?

Have a nice day:)

[christoph_bergemann]

Hello

1.) please start a new thread

2.) ISO 50001 seems to be very special; i am not aware of a SAP standard solution; may be others can help.. please check https://archive.sap.com/documents/docs/DOC-30884 and e.g. https://www.qsc.de/en/press-releases/release/news/qsc-energy-management-cockpit-is-germanys-first-sa...

C.B.

[Former Member]

Hi Ingo,

This is Scott Barber from the SCE project we worked together.  We are currently implementing the GRC-Audit tool for an Oil & Gas client in Houston.  The scope of audits includes QHSE Management System as well as specific quality and environmental audits.  The latest release of GRC-Audit, 1.2 SP00, has tools that are well aligned with these types of audits although there are a few gaps. A number of our gaps are being addressed in upcoming releases that are planned on a quarterly basis.

Some of the terminology in GRC-Audit seems a little strange at first because of its desire to (optionally) tie all audits to risks and controls through concepts like Auditable Items but this learning curve is overcome pretty quickly.  It is also tied deeply to GRC risk management concepts rather than EHSM Risk Assessment concepts which can take some getting used to for guys like us.

The tool itself is quite flexible from a technical standpoint with the UI5 front end and BOPF back end, which is convenient for EHSM developers.

Anyway, we have been able to adapt to it quite nicely and our client loves the UI and "tile" based user experience.  Let me know if you have further questions.

Regards,

Scott

[christoph_bergemann]

Dear Ingo

Any ISO norm is only provding a "high level guideline about what is the scope, what should be done etc. IN 80% of the cases "organisational stuff" is mentioned in these norms. That means: you are asked for to establish an organisation doing this or that and doing e.g,. audits from time to time to "control" if you are following these guidelines

ISO 9001 is dealing with a "qualitymanagement" approach. In my opinion SAP EHS is not the rights software for this (but support the idea of the norm)

ISO 14001 is a little bit different. This norm is realted to the question "how does a company organized a "maangement approach" to take care about "environment" topics,  Here we need to differentiate between "organisational part" and IT part. SAP EHS Management software can support here the "audit part"; but the audit and managment of the audit is done in most cases different; But I would assume that either there is a special SAP component availabel to suport this kind of audit or you can use SAP to develop your own solution; i did not invest if SAP does have such kind of solution

ISO 18001: here as ISO 14001: the same is true: SAP solution can support the "audit part"; but not the organisational part (or processes or whatsoever)

BUt quite interesting: there is a similar thread exsiting here:

and just by "googling" i found this online help: Audit - Auditmanagement - SAP Library (german version). So there is a SAP solution in place for ISO 9001 management.

And by further googling i found this:

http://www.sap.com/bin/sapcom/de_de/downloadasset.2014-12-dec-31-01.ISO 14001 Certificate CC01 SAP Brazil_Sao Leopoldo-pdf.html

And for last IS Norm: just check this document: http://www.sdn.sap.com/irj/scn/go/portal/prtroot/docs/library/uuid/b04ad1d2-577c-2d10-0eaa-cf7b0209b...

So you need only to "google" (simply) to find some SAP solutions (may be developed by SAP or may be own development)

C.B.

PS: just google. It is a great tool. You get many answers quite easily  in quite short time

[ingo_gulde]

Thank you Christoph. I shall try googling then.