This practical, how-to technical and risk management reference guide enables assurance, security and risk professionals - both IT and non-IT - to evaluate risks and controls in existing ERP implementations and facilitates the design and building of better practice controls into system upgrades and enhancements. The publication is based on SAP R/3 versions 4.6c and 4.7 and is the second edition of the globally demanded 2002 initial edition. It has been updated to