Your SlideShare is downloading. ×
Continuous Auditing, Monitoring & Data Analytics
Upcoming SlideShare
Loading in...5
×

Thanks for flagging this SlideShare!

Oops! An error has occurred.

×
Saving this for later? Get the SlideShare app to save on your phone or tablet. Read anywhere, anytime – even offline.
Text the download link to your phone
Standard text messaging rates apply

Continuous Auditing, Monitoring & Data Analytics

3,573
views

Published on

ASUG presentation on data analytics, continuous auditing and continuous monitoring

ASUG presentation on data analytics, continuous auditing and continuous monitoring

Published in: Technology

0 Comments
5 Likes
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total Views
3,573
On Slideshare
0
From Embeds
0
Number of Embeds
1
Actions
Shares
0
Downloads
81
Comments
0
Likes
5
Embeds 0
No embeds

Report content
Flagged as inappropriate Flag as inappropriate
Flag as inappropriate

Select your reason for flagging this presentation as inappropriate.

Cancel
No notes for slide

Transcript

  • 1. CONTINUOUS AUDITING, CONTINUOUS MONITORING, AND ] DATA ANALYTICS FOR AUDITING SAP R/3 MICHAEL BERARDI, MS-CIS, CISA ASUG INSTALLATION MEMBER MEMBER SINCE 2001 [ ANUP MAHESHWARI ASUG ASSOCIATE MEMBER MEMBER SINCE: 2008 [ SHERRYANNE MEYER ASUG INSTALLATION MEMBER [ AJAY VONKAREY MEMBER SINCE: 2000 ASUG ASSOCIATE MEMBER MEMBER SINCE: 1996
  • 2. [ Michael Berardi Real Experience. Real Advantage. 2
  • 3. [ SAP R/3 ENVIRONMENT AT ENERGIZER HOLDINGS INC.  Eveready Battery Company  Energizer and Eveready Batteries  SWS Schick  Playtex Products  SAP R/3 v. 4.7  Five instances of SAP R/3  USA – two instances  Sales (HP & PC)  Manufacturing (HP)  Europe  Sales (HP & PC)  Manufacturing (PC)  Human Resources/Payroll Real Experience. Real Advantage. 3
  • 4. [ FRAUD OPPORTUNITY TRIANGLE PRESSURE RATIONALIZATION Real Experience. Real Advantage. 4
  • 5. [ The only limits on what can be accomplished are the limits of your imagination, creativity and access to the data LIMITS OF DATA ANALYSIS, CONTINUOUS AUDITING AND MONITORING Real Experience. Real Advantage. 5
  • 6. [ TERMS DEFINED DATA Continuous Continuous CAATS ANALYSIS Auditing Monitoring Real Experience. Real Advantage.
  • 7. [ TOOLS SAP R/3 (SE16, SE17, SAP Queries) IDEA • Benford‟s Law toolkit ACL - http://www.acl.com • Desktop • Network version has evolved to Audit Exchange • Webinars – www.acl.com/findmoney Microsoft Access and Excel Real Experience. Real Advantage.
  • 8. [ Data Analysis Tools Outside SAP R/3  ACL  Direct Link for SAP R/3  ACL for the desktop  Audit Exchange  User Forums  http://www.acl.com  Idea (http://www.audimation.com)  Pre-built analysis for fraud - http://www.audimation.com/datas.cfm  Manufacturing applications http://www.audimation.com/applications/Manufacturing_Applications .pdf  Microsoft (Ms) Access  Ms Office  Approva Real Experience. Real Advantage.
  • 9. [ Approva BizRights Collaboration Across Business Users, IT and Audit Finance Business IT Managers Internal & External Managers Managers Auditors Pressure & Audit Costs Increasing Regulatory Process Controls: Process Configuration, Transactions, Master Data, … Multiple Controls Procure-to-Pay Order-to-Cash Financial Close Payroll Security Controls: Segregation of Duties, Sensitive Access… System Controls: Password Policies, Transport Policies… People Legacy Other SAP Oracle Soft Hyperion Apps Apps Multiple Applications Real Experience. Real Advantage.
  • 10. [ LEARNING POINTS Why apply data analysis with SAP R/3? Understanding the benefits of data analysis, monitoring and continuous auditing A cookbook approach to data analytics Energizer Holdings success with continuous monitoring Pre-written continuous monitoring and auditing tools Real Experience. Real Advantage. 10
  • 11. WHY APPLY DATA ANALYSIS [ Real Experience. Real Advantage.
  • 12. [ BENEFITS OF DATA ANALYSIS R/3 is data rich, report opportunistic Testing the entire populations versus samples Data analysis increases effectiveness and efficiency Effective for working remotely or on-site Easier to share information electronically than via hardcopy reports Real Experience. Real Advantage.
  • 13. [ BENEFITS OF DATA ANALYSIS  Benford‟s law – who can tell me what this is? Real Experience. Real Advantage.
  • 14. [ RETURN ON INVESTMENT • Payroll • SSN tests (invalid, duplicate, dead people) • Setting criteria for percent change from run to run Continuous • Accounts Payable Monitoring • Duplicate Payments • Unclaimed credits • Systems such as Approva or those you build yourself can identify unusual transactions that might avoid a fraudulent payment • Look for a series of split transactions, avoiding the Continuous dollar cutoff for either no receipt or no approval Auditing required Real Experience. Real Advantage. 14
  • 15. [ PAYROLL Ghost Expense Reported reimbursement Employees overtime • AP vendor bill during slow • Invalid SSN and employee • No benefits reimbursemnt period Segregation or unusual through • Authorized of Duties items payroll check overtime? (SOD) • Dup Dir for expense • Rounding up Deposit Info hours? Real Experience. Real Advantage. 15
  • 16. [ ACCOUNTS PAYABLE Duplicate payments & vendor pre-payments Procurement Invoice to Site draft to Duplicate card to invoice off-invoice vendor invoice Real Experience. Real Advantage.
  • 17. [ ACCOUNTS PAYABLE (CONT.) LOOSE INVOICES (NO PO) Fictitious vendors Employee vendor accounts Duplicate freight charges Missed earned vendor discounts Real Experience. Real Advantage. 17
  • 18. [ Revenue Leakage • Unlimited No. copies per Co. • No Expiration Evaluation Software • Outstanding copies not disabled upon purchase • Trends –always same vendor(s)? Short Paid invoices • Excessive rebates? Unauthorized discounts or credit notes? Price overrides Real Experience. Real Advantage. 18
  • 19. [ BEST PRACTICES Follow the SDLC process in the selection and Include I.T. in the implementation process of a data analytics tool Follow the SDLC Allocate enough process in the storage space on creation of new the SAP server queries, so as not for what the to impact the selected tool production produces system(s) Real Experience. Real Advantage. 19
  • 20. [ LEARNING POINTS Real Experience. Real Advantage.
  • 21. [ A DATA ANALYSIS APPROACH – DATA COOKBOOK Don‟t re-create the wheel every time you develop a new report Maintain a list of the tables and procedures followed Cookbook a catalogue of Recipes Recipes may reference existing R/3 reports or table sources and procedures to produce reports Sources of information on tables and the location of data exists both within R/3 and through internet resources Real Experience. Real Advantage.
  • 22. [ Using SharePoint to organize and store data analysis, continuous auditing and continuous monitoring „recipes‟ or procedures SHAREPOINT TOOL Real Experience. Real Advantage. 22
  • 23. [ AUDIT SITE WITH LINK TO COOKBOOK Real Experience. Real Advantage. 23
  • 24. [ SHAREPOINT SITE USED FOR RECIPES Real Experience. Real Advantage. 24
  • 25. [ Real Experience. Real Advantage.
  • 26. [ Real Experience. Real Advantage.
  • 27. [ Real Experience. Real Advantage.
  • 28. [ Real Experience. Real Advantage.
  • 29. [ Real Experience. Real Advantage.
  • 30. [ Real Experience. Real Advantage.
  • 31. [ Real Experience. Real Advantage.
  • 32. [ Real Experience. Real Advantage.
  • 33. [ Real Experience. Real Advantage.
  • 34. [ Real Experience. Real Advantage.
  • 35. [ Real Experience. Real Advantage.
  • 36. [ Real Experience. Real Advantage.
  • 37. [ LEARNING POINTS Real Experience. Real Advantage.
  • 38. [ SAP R/3 Tables for testing  According to ACL there are over 20,000 tables in SAP R/3  The following are the top 20 Tables:  BKPF - Financial Documents Header  BSEG - Financial Document Items  EKKO - Purchasing Document Header  EKPO - Purchasing Document Item  BSAD - Cleared Customer Invoices (paid)  BSAK - Cleared Vendor Invoices (paid) Real Experience. Real Advantage.
  • 39. [ SAP R/3 Tables for testing  BSIS - General Ledger Accounts  KNA1 - Customer Master (General Data)  KNKK - Customer Master (Credit Data)  KNVV - Customer Master (Sales Data)  LFA1, LFB1, LFM1 - Vendor Master  MARC - Material Master  VBAK - Customer Orders - Header  VBAP - Customer Orders - Items  VBRK - Customer Invoices - Header  VBRP - Customer Invoices - Items Real Experience. Real Advantage.
  • 40. [ SAP R/3 Tables for testing  DD02T - Table Titles  TSTCT - Transaction Titles  Create your own list of tables, transactions and reports you find useful  Join ASUG Internal Controls SIG discussion groups to grow your knowledge Real Experience. Real Advantage.
  • 41. [ Good Information Sources  Google – http://www.google.com  SAPGenie - http://www.sapgenie.com  SAPGenie Table Diagrams  http://www.sapgenie.com/abap/tables.htm#Finance%20Tables  SAP Help on the Web - http://help.sap.com/  SAP R/3 Application Help  http://help.sap.com/saphelp_470/helpdata/EN/e1/8e51341a06084 de10000009b38f83b/frameset.htm Real Experience. Real Advantage.
  • 42. [ Good Information Sources  ISACA  http://www.isaca.org and select downloads for SAP ICQ & Audit Programs  ISACA Bookstore for guides such as “Security, Audit and Control Features SAP R/3 A Technical and Risk Management Reference Guide” Real Experience. Real Advantage.
  • 43. [ LEARNING POINTS Real Experience. Real Advantage.
  • 44. [ SAP R/3 transactions to facilitate data analysis  Transactional access required  Display only access  Data Dictionary (SE11)  Ability to view tables (SE16, SE17) Demonstration of Transaction Code SE16  Using R/3 transactions to locate table data Demonstration of using Help - Technical Settings Real Experience. Real Advantage.
  • 45. [ SE11 – DATA DICTIONARY Real Experience. Real Advantage. 45
  • 46. [ Transaction SE11 to display data dictionary information Real Experience. Real Advantage.
  • 47. [ Real Experience. Real Advantage.
  • 48. [ SE16 – EXTRACTING FROM TABLE FIELDS Real Experience. Real Advantage. 48
  • 49. [ Transaction Code SE16 TCODE: SE16 Real Experience. Real Advantage.
  • 50. [ Transaction Code SE16 Real Experience. Real Advantage.
  • 51. [ Transaction Code SE16 Real Experience. Real Advantage.
  • 52. [ Transaction Code SE16 Real Experience. Real Advantage.
  • 53. [ Transaction Code SE16 Real Experience. Real Advantage.
  • 54. [ HOW DO I FIND THE TABLE AND FIELD IN WHICH DATA RESIDES? Real Experience. Real Advantage. 54
  • 55. [ When working with the users.... Click on the paper in the bottom left corner gives critical information such as Tcode Real Experience. Real Advantage.
  • 56. [ So how do I find the source of information? Real Experience. Real Advantage.
  • 57. [ So how do I find the source of information? Real Experience. Real Advantage.
  • 58. [ So how do I find the source of information? Real Experience. Real Advantage.
  • 59. To save to a file on [ your local hard drive follow this menu tree Real Experience. Real Advantage.
  • 60. [ LEARNING POINTS Real Experience. Real Advantage.
  • 61. [ SAP Queries – Tcode SQ01 Real Experience. Real Advantage. 61
  • 62. [ Key Learning Points!  Grow your knowledge of SAP R/3  Discussion groups  ASUG chapter meetings  Locate training  Find good sources of SAP R/3 information related to internal controls  Start a cheat sheet of transactions, tables, programs and reports  Start your own library of data extraction and analysis methods and reference them in the applicable internal controls test plans Real Experience. Real Advantage.
  • 63. [ Questions or Comments? THANKS, MICHAEL BERARDI MICHAELA.BERARDI@ENERGIZER.COM Real Experience. Real Advantage. 63
  • 64. [  Thank you for participating. Please remember to complete and return your evaluation form following this session. For ongoing education on this area of focus, visit the Year-Round Community page at www.asug.com/yrc ] [ SESSION CODE: 4506 – Data Analysis, Continuous Auditing and Monitoring Real Experience. Real Advantage. 64
  • 65. [ IDEA by AUDIMATION Real Experience. Real Advantage. 65
  • 66. [ Real Experience. Real Advantage. 66
  • 67. [ Real Experience. Real Advantage. 67
  • 68. [ http://www.slideshare.net/acc_shan/sap-hr- presentation-08052002-presentation Real Experience. Real Advantage. 68

×