SAPPN
31
GRC

Governance, risk & compliance

Authorization design, segregation of duties and GxP controls that apply identically in Pharma Mode and SAP Model.

Open audit trail
SoD rules
6
Critical risks
3
Roles defined
6
Users assigned
90

Segregation of duties

IDRuleRiskStatus
SOD-01Create supplier vs. approve supplier paymentCriticalEnforced
SOD-02Create purchase order vs. post goods receiptHighEnforced
SOD-03Record QC result vs. post usage decisionCriticalEnforced
SOD-04Maintain material master vs. approve change requestHighEnforced
SOD-05Create sales order vs. release credit blockHighMonitored
SOD-06Batch release vs. batch manufacturing confirmationCriticalEnforced

Roles & critical transactions

RoleTransactionsUsers
Production PlannerPP-PLORD, PP-ORDER, MM-STOCK12
QC AnalystQM-RESULTS, QM-LOT (display)24
QA Release OfficerQM-UD, PP-ORDER (display), Batch release6
BuyerMM-PR, MM-PO-CREATE, MM-SOURCE9
Warehouse OperatorMM-MATDOC, EWM-STOCK, Putaway/Picking31
Financial AccountantFI-DOC, FI-AP, FI-AR8

Application controls

  • CTL-01 Electronic signature on release

    Every usage decision and batch release captures user, time, meaning and reason (21 CFR Part 11).

  • CTL-02 Change documents on master data

    Regulated fields (shelf life, storage, specification) require an approved change request.

  • CTL-03 Release strategy on purchasing

    Value-based approval levels with quality agreement validity check on the supplier.

  • CTL-04 Blocked stock enforcement

    Rejected batches cannot be picked, delivered or invoiced by any process.

  • CTL-05 Audit trail immutability

    ALCOA+ trail written on every posting, reversal and approval; reversal never deletes.

Records & transactions

Change control · Executive decision log · Deviation

No records posted in this module yet. Use New record to create one — it is saved to the shared database with an audit entry, recomputed into the KPIs and alarms, and fed to the AI agents as live context.