Modelo conceptual de auditoria do sistema SAP/R3 caso de estudo: auditoria do sistema SAP/R3 nas empresas do grupo Petromoc

Abstract

This work, in a didactic way, aims to provide companies that use SAP/R3 a guarantee of the proper implementation and operation of the system, so that there are no major constraints due to the creation of users without proper licensing, bad definition of profiles, lack of reliable system recovery measures, etc. Based on a study on information systems auditing, user auditing, information technology specialists, system security, systems auditing techniques and the SAPZR3 with bibliographic base, an audit model with illustration was designed. the pre-audit phases, with the purpose of preparing the audit documentation, training the audit team and drawing up a work plan suited to the entity to be audited; The planning phase, with objectives to know the system environment, analyze the installed system and verify user satisfaction; The execution phase, showing the systems approach that is top down; The analysis phase in which the information collected in the previous phases is analyzed; The completion phase, showing the results of the audit, discussion of results and recommendations. The conceptual model was implemented in the context of companies in the Petromoc group, using auditing techniques such as questionnaires, interviews and face-to-face visits; The implementation was based on the execution phase of the conceptual model in which there was poor creation of user profiles, the non-periodic parameterization of SAP/R3, the lack of knowledge of the system's use by the users, lack of reliable measures system recovery after the loss, and programs are developed in the Productive client. In this way, the conclusions and recommendations are in order to have a proper operationalization of the system, avoiding the verified constraints. The conceptual model is comprehensive, encompassing the technical and functional parts, requiring, as a limitation, additional knowledge of the implications for load analysis, exploration, database and system functionality.