Audit: Articles & Insights

The 2026 global SoD survey (100 practitioners, 26 countries) found that conflicts per user did not move in five years, 19% never review their ruleset, and 38% have no cross-system rules. Most of those figures are estimates. Here is how to replace the estimate with a measurement, and which gaps an analysis tool closes.

Critical access is a category of access risk separate from Segregation of Duties: transactions that cause damage on their own, without needing a conflicting partner. This guide lists the critical transactions every SAP environment should monitor, explains how to detect them with access risk analysis, and shows how MTC Skopos catches them in the same pass as SoD.

Payroll postings, treasury transactions, executive compensation - some G/L accounts need tighter access control. Here's how to configure authorization groups with F_BKPF_BES and F_BKPF_BLA in SAP S/4HANA, step by step.

Traditional SoD analysis identifies who has conflicting access. Did-Do analysis answers the critical follow-up question: Did users with risky access actually make changes? This evidence-based access violation monitoring approach transforms compliance from theoretical to actionable.