As an internal auditor for a organization with SAP ECC System, the challenge is to have a quick way to monitor the risk of the system. Most commonly the SAP security issues are highlighted during the external audit and then the companies have to hire some expensive consultants to re-mediate the risk. But monitoring the system day to day without the help of technical people is a challenge for the Internal consultants. Most often the same problems reappears during the subsequent audits and the company spends huge amount of money and resources to fix this problem and it could expensive one. Most companies keep on ignoring the problem till the issue becomes big and costs them huge bill.