SAP Security and Authorization Concepts

R/3 audit review questions. Here is a list of items most commonly reviewed by internal/external auditors when reviewing your R/3 system. It is always a good idea to review this list a couple times a year and to take the appropriate steps to tighten your security. Review the following :- * System security file parameters (TU02) (e.g. password length/format, forced password sessions,  user failures to end   session etc.) have been set to ensure confidentiality and integrity of password.

Read more here