Show TOC

Function documentationIntegration with Internal Audit Management Locate this document in the navigation structure

 

Internal Audit Management (IAM) provides a risk-based approach to audit planning. Using IAM, you can leverage risk and control information maintained in SAP Risk Management (RM) and SAP Process Control (PC) throughout the audit planning process. You can also transfer audit proposals to NetWeaver Audit Management for audit processing, and as needed, import audit action items to generate audit issues for reporting and monitoring purposes.

Features

The IAM work center provides a central location to define the audit universe for your organization, perform an audit risk rating, complete audit planning, view IAM reports, and generate audit issues by importing audit actions from NetWeaver Audit Management or other audit management tools.

The IAM Work Center contains the following sections:

  • Audit Universe

    The audit universe is the collection of auditable entities in your enterprise. Auditable entities within the audit universe can be classified as department, function, or Line of Business, and can be customized to suit your needs.

    The entities you plan to audit determine your approach to conducting the audit. You can link related entities from PC and RM to the auditable entities (for example, risks, processes, controls, etc.).

  • Audit Risk Rating

    The audit risk rating is the process used to determine priority of auditable entities according to a set of risk criteria, and to propose audits.

  • Audit Planning

    Audit planning provides the specific procedures to be undertaken to implement the strategy and completion of an audit.

    Audit planning includes the following:

    • Audit Proposal

      An audit proposal is a planned audit for a specific auditable entity.

    • Audit Plan Proposal

      An audit plan proposal is a collection of audit proposals grouped into a planned implementation of auditing activities. You create audit plan proposals using new or existing audit proposals.

      IAM audit planning results from audit plan proposals are transferred to NetWeaver Audit Management for further processing.

  • Reports

    IAM reports provide information on what risks are applicable to your auditable entities, the planning of your audit, and what auditable entities are applicable to your audit plan proposal.

  • Audit Issues

    IAM enables you to generate and monitor audit issues using actions items from NetWeaver Audit Management and other audit management systems.