Internal Audit Management (IAM) provides a risk-based approach to audit planning. Using IAM, you can leverage risk and control information maintained in SAP Risk Management (RM) and SAP Process Control (PC) throughout the audit planning process. You can also transfer audit proposals to NetWeaver Audit Management for audit processing, and as needed, import audit action items to generate audit issues for reporting and monitoring purposes.
The IAM work center provides a central location to define the audit universe for your organization, perform an audit risk rating, complete audit planning, view IAM reports, and generate audit issues by importing audit actions from NetWeaver Audit Management or other audit management tools.
The IAM Work Center contains the following sections:
Audit Universe
The audit universe is the collection of auditable entities in your enterprise. Auditable entities within the audit universe can be classified as department, function, or Line of Business, and can be customized to suit your needs.
The entities you plan to audit determine your approach to conducting the audit. You can link related entities from PC and RM to the auditable entities (for example, risks, processes, controls, etc.).
Audit Risk Rating
The audit risk rating is the process used to determine priority of auditable entities according to a set of risk criteria, and to propose audits.
Audit Planning
Audit planning provides the specific procedures to be undertaken to implement the strategy and completion of an audit.
Audit planning includes the following:
Audit Proposal
An audit proposal is a planned audit for a specific auditable entity.
Audit Plan Proposal
An audit plan proposal is a collection of audit proposals grouped into a planned implementation of auditing activities. You create audit plan proposals using new or existing audit proposals.
IAM audit planning results from audit plan proposals are transferred to NetWeaver Audit Management for further processing.
Reports
IAM reports provide information on what risks are applicable to your auditable entities, the planning of your audit, and what auditable entities are applicable to your audit plan proposal.
Audit Issues
IAM enables you to generate and monitor audit issues using actions items from NetWeaver Audit Management and other audit management systems.