SAP application controls

[stargardt18]

Our company's current Enterprise Resource management (ERM) system is SAP. Management has identified certain configuration controls as part of SAP but we are not certain if we have all we need. We are looking for any tool or guidance utilized by other companies to identify and assess such configuration controls. Please note that we are NOT referring to general IT controls (e.g. change management, system development life cycle, user access, data back-up, etc.)