Modifying queries

 

You can always add T-codes or Authorizations to a query whenever this seems relevant (for example when your SAP environment, Authorization concept or your Business requirements are changed).

Just add the new item to an existing query and in case you are adding Authorizations keep in mind that you might need to add some Authorization Object Field Values as well. 

 

You can always delete T-codes or Authorizations from a query whenever this seems relevant (for example when your SAP environment, Authorization concept or your Business requirements are changed).

Just remove the obsolete item from an existing query and in case you are removing Authorizations keep in mind that you might need to remove some Authorization Object Field Values as well. 

 

You might need to activate additional T-codes or Authorizations whenever your SAP environment, Authorization concept or your Business requirements are changed. Doing so will change the behavior of the Auditing logic (improving the fit between your situation and the Audit), so make sure that the changes you make are correct.

 

Note: By using the Optional Authorization Objects, the activating process might be executed automatically for the Objects related to the questionnaire.

 

You might need to deactivate obsolete T-codes or Authorizations whenever your SAP environment, Authorization concept or your Business requirements are changed. Doing so will change the behavior of the Auditing logic (improving the fit between your situation and the Audit), so make sure that the changes you make are correct.

 

Note: By using the Optional Authorization Objects, the activating process might be executed automatically for the Objects related to the questionnaire.

 

Note: In most cases it seems like a more sound approach to deactivate components from queries than deleting them. Whenever your situation changes again and the components become important again, they will still be there and you can simply reactivate them.

 

Aswering the questionnaire will modify various queries in a number of ways (which are related to your answers).

Using this feature might have a large impact on your queries and therefore this feature is to be seen as mass maintenance.

For more information about this feature, please refer to the Optional Authorization Objects-topic.

 

Specifying transaction codes (by single clicking a query in the Audit Cockpit's left pane) to simulate and clicking the 'Simulation'-button in the Audit Cockpit's middle pane opens a dialog box with two areas.

The left area ‘Required Authorization Objects’ lists all objects which are related to the specified transaction codes.

Further on, you can select/deselect objects and paste your selection with a click into the Authorization Object pane ('Paste into Authorization Objects'-button).

 

The area Required Authorizations on the right hand side imports information related to the specified transaction codes in your selection.

This information comes directly from the USOBT table from your SAP system.

This data has been fine tuned in your system as a standard using the transaction SU24.

This allows you to easily select/deselect authorizations and paste these standards for authorization into the Authorization Object Field Values pane ('Paste into Authorization Object Field Values'-button).

 

This functionality offers an excellent way to build new queries from scratch based upon transaction codes which you specify. Consequently, you will expand your audit capabilities with little effort and less time spent.

 

You can print the entire content of a query (such as transactions, authorizations, risks, comments …).

 

Select the queries you wish to print and filter. What is seen on the screen will be printed.

Then click the 'Print Query Overview'-button. 

 

 

The next step is selecting which properties (General, Risk, Suggested Controls, Transaction Codes, Norm, ...) for the queries you wish to print.

 

Finally, click the 'Print Query Overview'-button in order to activate the printing process. 

 

Double clicking a query in the Audit Cockpit opens the Query Info/risk dialog box.

The comments, info, risks, control objectives, ... for this query will be automatically added into the CSI AA Result Container when the query will be executed and the corresponding results appended to the Result Container.

This allows you to edit these Info/Risk comments and update the CSI AA Result Container without opening it.

 

Note: This form is fully resizable.

 

The CSI Authorization Auditor enables you to set normative information for each user per query for each variant in a so-called norm. There are 2 ways to set normative information, either in the Select & Run module/Audit cockpit or in the Result Container. For the latter, we refer to Result Container - Queries View. These defined norms which are assigned to users are stored within the query database to prevent inconsistencies.

 

The 'Norm'-button (button with two faces) In the Select & Run module/Audit cockpit screen will open a dialog box with current normative information for the active query.

 

You can assign a norm to user groups or single users. When a user group is assigned to the norm, all users in that user group will be given that norm code.

 

Note: When a norm code is assigned to an individual user, it overrides the user group assignment.

 

 

In the above example anyone in the user group CSI will be assigned the NORM CODE = U and the REASON CODE = NC for CSI query AASSGU –<NA> no variant will be applied. The norm is only active for this particular variant.

 

Dump to Excel

The 'Dump to Excel'-button allows you to export the list of Norms into an Excel file. Clicking the button will open a popup where you can choose a filename and output location for this export.

 

Note: The default output location is the same as the folder where the CSI AA executable was installed.

 

Creating new Norm Reason Codes

Select Edit - Define Norm Reason Codes from the menu at the top of your screen.

 

This will open the 'Maintain Reason Codes'-screen. In here you can add new Norm Reason Codes with a short and full description (and optionally compensating controls).

 

Note: All fields except 'Compensating controls' need to be filled in.

 

Creating new Norm Codes

Please refer to the Preferences - Norm Codification topic. 

 

 

Whenever you modify a query (or a component of a query) you should store this change in the database by clicking the 'Pencil'-symbol indicated in the screenshot above.