SAP OSS Notes Review 1452
-
Is anyone having to ‘proactively review’ OSS release notes and determine if they should be implemented in their SAP environment as a key control?
Our external auditors pushed hard for this two years ago and we are finding it not only to be nearly impossible with the number of OSS notes needed to review, but detrimental as instead of performing changes based on business requirements, we are getting notes that might be contrary to the business needs within SAP.
Thanks in advance for any insight.