As an internal auditor for an organization with SAP ECC System, the challenge is to have a quick way to monitor the risk of the system. Most commonly the SAP security issues are highlighted during the external audit and then the companies have to hire some expensive consultants to remediate the risk. But monitoring the system day to day without the help of technical people is a challenge for the Internal consultants. Most often the same problems reappear during the subsequent audits and the company spends a huge amount of money and resources to fix this problem and it could an expensive one. Most companies keep on ignoring the problem till the issue becomes big and costs them a huge bill.