GSN Aug/Sept Digital Edition

Cybersecurity and ConvergenceNew Guide from ISACA helps organizationsimprove SAP security controlsROLLING MEADOWS, IL, USA(30 July 2015)—To help audit, riskand security professionals evaluaterisk and controls in existing ERPimplementations, global IT associationISACA has issued a significantupdate to Security, Audit and ControlFeatures SAP® ERP.This new edition provides currentbest practices and identifies futuretrends in ERP risk and control. Itenables audit, assurance, risk andsecurity professionals (ITand non-IT) to evaluaterisks and controls in existingERP implementationsand to facilitate thedesign and building ofbetter practice controlsinto system upgradesand enhancements.New features includerisk, controls and assessmenttechniques to audit SAP FI/CO, HCM, BASIS, and SAP Security,an overview of the SAP GRCSuite, updated Sarbanes-Oxley controlobjectives, and a list of sensitivetables and transaction codes.“ERP systems automate and integratemuch of a company’s businessprocesses to create consistency.ISACA released this important updateto bring together informationrelated to SAP ERP-specific risks,controls and testing procedures,”said Ben Fitts of Deloitte Advisory,who worked with ISACA on thefourth edition of the book. “Thiswill be a go-to reference for auditors,not just as a one-time read,but as a book they can dog-ear withsticky notes and return to year afteryear.”ERP software integrates all facetsof an operation, includingproduct planning,development, manufacturing,sales and marketing.The integration ofthese functional capabilitiesinto an online andreal-time applicationsystem designed to supportend-to-end businessprocesses helps enterprisesto plan and optimize theirresources across the enterprise.In addition, a set of audit programsbased on COBIT 5 are available fordownload free to ISACA membersand for US $45 to nonmembers andinclude:1. Revenue Business Cycle Audit/Assurance Program and ICQ2. Expenditure Business CycleAudit/Assurance Program and ICQ3. Inventory Business CycleAudit/Assurance Program and ICQ4. Financial Accounting (FI)Audit/Assurance Program and ICQ5. Managerial Accounting (CO)Audit/Assurance Program and ICQ6. Human Capital ManagementCycle Audit/Assurance Programand ICQ7. BASIS Administration and SecurityAudit/Assurance Programand ICQPrint and digital versions of Security,Audit and Control FeaturesSAP ERP, 4th Edition, are availablefor US $60 for ISACA members andUS $80 (print) and US $75 (digital)for nonmembers. To purchase acopy, visit www.isaca.org/sap-erp-4.ISACAISACA® (isaca.org) helps globalprofessionals lead, adapt and assuretrust in an evolving digital world byoffering innovative and world-classknowledge, standards, networking,credentialing and career development.Established in 1969, ISACAis a global nonprofit association of140,000 professionals in 180 countries.ISACA also offers the CybersecurityNexus (CSX), a holisticcybersecurity resource, and CO-BIT®, a business framework to governenterprise technology.24