Evidence · Q2-EV-015

SAP S/4HANA · access review (Q2)

AcceptedAccess reviewCollected 6 Jun 2026

Requirement to validation

Requirement
ISO-A.5.3 · ITGC-BP-01 · SOC2-CC5.2
mapped
Policy
Payments Security Policy
pol-payments
Control
P2P-02
Vendor master changes require dual control
Application
SAP S/4HANA
mapped
Evidence · Q3
1 items
1 approved · 0 pending · 0 rejected
Test · Q3
Pass
TST-ITGC-P2P-02 · High confidence
Finding
None
Action
None
Validation
Not planned

Record

Control
P2P-02 · Vendor master changes require dual control
Source system
SAP S/4HANA
Cycle
Q2 2026 Unified Program Review
Review note
Accepted for the Q2 baseline sample.
Provenance
Q2 2026 internal audit baseline workpaper (staged)