CSI Accelerator provides functionality to define a companies' business control framework using processes, risks, control objectives and control measures.
Control measures can be defined at following levels:
Following ways are provided to create control measures:
Click on to open the table view, which is used for mass maintaining control measures.
Tip: To go directly to the table view, select View > Control measures from the menu.
Click
on or press <CTRL> + S to save all created.
Tip:The table view can be easily populated by copy paste from Excel.
Tip: To easily export the table view to Excel click on in the bottom right corner.
To include additional information or to link documents to the newly created control measure, double click on the appropriate item to open its details.
To select a control status click on the relevant traffic light in the control status section . To deselect a chosen status, either select a new status or click on the selected status.
The control status is dependant of the period. See period management topic for more information.
Tip: Hover over the traffic light to show its short description.
Include comments
Comments can be entered as free text on the Comment tab.
The How to textbox is intended to document how the control measure should be assessed.
The How to textbox is on top of the How To's tab.
On the Control Area tab can be indicated to which control areas the control measure concerned applies to.
On the System Release tab can be indicated for which system releases the control measure concerned is relevant. For maintenance of system releases see also Master Data - System releases.
Documents can be easily linked to a control measure by copy and paste or drag and drop from within Windows Explorer.
Tip: Also hyperlinks can be linked from within the Documents tab.
To have CSI Accelerator® automatically check pre-defined values in SAP, it necessary to first indicate relevant tables on the Tables tab for the control measure concerned.
Warning: The table name should be a valid SAP table, otherwise it cannot be used for automatic value checking.
On the Logical systems tab can be indicated to which logical systems the control measure concerned is relevant to. For maintaining logical systems see also Master Data - Logical systems.
To assign a new logical system either type the appropriate name in the "Logical system" field or click on to select from the list of all existing logical systems.
Tab Norm : for maintaining norms see Norm maintenance.
For maintaining and/or assessing actuals (based on predefined norms) see Maintaining actuals.
The Processes tab is intended informatively and indicates to which process steps the control measure concerned is linked.
It is however possible to assign a process step to the control measure concerned by typing the appropriate process name in the "process" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate process steps.
From within the Select processes popup select relevant processes (by ticking the checkbox) and press .
Tip: To show all process steps enter "**" as filter criteria.
The Risks tab is intended informatively and indicates to which risks the control measure concerned is linked.
It is however possible to assign a risk to the control measure concerned by typing the appropriate risk name in the "risk" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate risks.
From within the Select risks popup select relevant processes (by ticking the checkbox) and press .
Tip: To show all risks enter "**" as filter criteria.
The Control objectives tab is intended informatively and indicates to which control objectives the control measure concerned is linked.
It is however possible to assign a control objective to the control measure concerned by typing the appropriate control objective name in the "control objective" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate control objectives.
From within the Select control objectives popup select relevant processes (by ticking the checkbox) and press .
Tip: To show all control objectives enter "**" as filter criteria.
On the Queries tab can be indicated which authorization audit queries are relevant for the control measure concerned. By having this link Controls Organizer functionality is integrated with Authorization Audit functionality. For maintaining queries see also Authorization Auditor - Queries.
To assign a query to the control measure concerned type the appropriate query name in the "query" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate queries.
From within the Select queries popup select relevant queries (by ticking the checkbox) and press .
Tip: To show all queries enter "**" as filter criteria.
On the Roles tab can be indicated which SAP roles are relevant for the control measure concerned. By having this link Controls Organizer functionality is integrated with Authorization Audit functionality.
To assign a role to the control measure concerned type the appropriate role name in the "role" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate roles.
From within the Select roles popup select relevant roles (by ticking the checkbox) and press .
Tip: To show all roles enter "**" as filter criteria.
The SoD Conflicts tab is intended to indicate which SoD conflicts the control measure concerned is linked to. By having this link Controls Organizer functionality is integrated with Authorization Audit functionality.
To assign an SoD conflict to the control measure concerned type the appropriate name in the "SoD conflict" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate SoD conflicts.
From within the Select SoD conflicts popup select relevant SoD conflicts (by ticking the checkbox) and press .
Tip: To show all SoD conflicts enter "**" as filter criteria.
Persons (and/or functions) responsible can be assigned to the control measure concerned using the Involved persons tab. Having involved persons assigned facilitates the reporting process.
.
To assign an involved person to the control measure concerned type the appropriate name in the "involved person" field or
right mouse click in the grid and select "Add" from the popup.
In the Filter popup enter at least two characters to search for the appropriate involved persons.
From within the Select involved persons popup select relevant involved persons (by ticking the checkbox) and press .
Tip: To show all involved persons enter "**" as filter criteria.
Documents can be easily linked to a control measure by copy and paste or drag and drop from within Windows Explorer.
The Processes tab is intended informatively and indicates to which process steps the control measure concerned is linked.
The SoD Conflicts tab is intended informatively and indicates to which SoD conflicts the control measure concerned is linked. By having this link Controls Organizer functionality is integrated with Authorization Audit functionality.
The process decomposition can be altered by "dragging and dropping" control measures through the decomposition.
Tip: By just performing a drag-and-drop action, the control measure is moved.
By holding <CTRL> while performing the drag-and-drop action a copy is made of the control measure.
By holding <CTRL> + <SHIFT> while performing the drag-and-drop action a reference is made to the control measure.
Select relevant control measures from the Library and drag-and-drop them to the Process pane.
Tip: Multiple items can be selected from the Library by holding <SHIFT> or <CTRL> while selecting relevant items.
This document is up to date with version 11.1.10.20 of CSI Accelerator