This SAP Change Management Review Audit Report provides a comprehensive assessment of your company’s SAP change management processes, utilizing the Software Engineering Institute (SEI) Capability Maturity Model (CMM) as a benchmark. This document can be used by management to identify and mitigate risks associated with unauthorized changes in the SAP environment. It outlines key areas such as SAP change configuration controls, security controls, segregation of duties and emergency change processes. The report includes detailed findings, recommendations, and management responses, offering actionable insights for improving change control procedures, documenting testing requirements and standardizing approval processes.

Additionally, it emphasizes the need for clear policies and procedures to ensure proper documentation, tracking and approval of changes, thus enhancing the overall efficiency and security of the SAP system. This audit report serves as a valuable tool for internal auditors, IT managers and compliance officers to ensure that SAP change management practices align with industry standards and organizational policies, ultimately contributing to better governance and operational stability.

A company utilizes SAP as its enterprise resource planning (ERP) application to run most of its various businesses. The following modules have been implemented:

• Materials Management (MM)
• Sales and Distribution (SD)
• Production Planning (PP)
• Human Resources (HR)