Explaining Control Execution​

Objective

After completing this lesson, you will be able to explain the control execution.

Control Execution

Acting as a centralized container, a Work Package bundles together controls and the procedures used to monitor or test them. This ensures that compliance activities are not only carried out but done so systematically, efficiently, and with full traceability.

At its core, a Work Package is designed to group related controls—especially those addressing the same risk—into a unified execution plan. Whether you're running automated checks or initiating manual assessments, the Work Package becomes your operational hub. Automated procedures execute independently based on scheduled parameters, while manual ones trigger actions within a defined timeframe. Should something go wrong—whether an automated threshold is breached or a manual test fails—issues are automatically generated, ready for further investigation and remediation.

Creating Work Packages: Two Paths

There are two main ways to create Work Packages in SAP Risk and Assurance Management:

  1. Periodic Work Packages: Created using the Manage Work Packages app. Ideal for regular, recurring control assessments.
  2. Ad-Hoc Work Packages: Created directly from the Manage Controls app. Perfect for immediate or one-off control executions.

Each Work Package starts by defining the Assurance Activity—the reason behind its creation. You can choose from:

  • Control Performance
  • Control Effectiveness Test
  • Control Assessment

If you select Control Effectiveness Test, the system will default to running the Work Package once upon activation—a practical setup for targeted evaluations.

Laying the Foundation: Scheduling and Scope

Once the assurance activity is set, it’s time to define the schedule. This includes:

  • Recurrence Range (start and end period)
  • Reference Period (Calendar Date, Fiscal Period, or No Date)
  • Fiscal Year Variant (if applicable)
  • Run Frequency (for example, monthly, quarterly)
  • Run and Due Dates (defining when procedures start and when results are expected)

A further key step is defining the Checking Periods, especially for automated procedures. This ensures that system-driven controls pull and evaluate the correct range of data.

Work Packages integrate seamlessly into SAP Risk and Assurance Management’s broader compliance landscape. Administrators can:

  • Recalculate missed runs
  • Monitor performance by limiting procedure execution rates
  • Access execution reports that contribute to broader compliance analytics

Work Packages link directly to controls, risks, regulations, and procedures, anchoring them within an executable framework. As such, they not only support structured execution but also provide the foundation for robust compliance reporting and continuous monitoring.

For further guidance, see: Work Packages Preparation | SAP Help Portal

Perform an Ad-Hoc Work Package in the Manage Control Tile and Create a New Work Package