SOX Critical Transaction

What are the most critical SOX Transaction in SAP R/3?

Although there might be many SOX critical transactions, here are a handy list of some most critical ones.
 

TCODES Critical Risk Description

F.80      Mass Reversal of Documents
FI12      Change House Banks/Bank Accounts
F.34      Credit Limit Mass Changes 
CA87    Mass Replace Work Center
CL04    Delete Class 
CAT6   Human Resources
IP30     Run Date Monitoring
LN08    Number range maint.: LVS_LENUM
PA20    Display HR Master Data
PA70    Fast Entry
PA30    Maintain HR Master Data
PFCG   Role Maintenance - System integrity, stability at risk
MMPV Close Periods
MMRV Allow Posting to previous Period
RZ04    Maintain SAP Instances
SU01    User Maintenance - Should be restricted to User Admins only
SA38   ABAP Reporting -Can run programs not protected appropriately
SCC1  Client Copy - Special Selections
SCC4  Client Admin. - System stability & integrity at risk
SCC5  Delete Client - System stability at risk
SCC6  Client Import - System stability & integrity at risk at risk
SCCL  Local Client Copy - System stability & integrity at risk
SE01   Transport Organizer - System stability & integrity at risk
SE11   Data Dictionary Maint. - System stabiltiy & integrity at ris
SE13   Maintain tech tables settings - System stabilitiy at risk.
SE16   Data Browser - Exposure to confidential information
SE37   Function Builder
SE38   ABAP Editor - System stabiltiy & integrity at risk
SM01  Lock Transactions - System stabiltiy at risk
SM02  System Messages - Should be restricted to System Admins only
SM30  Table Maintenance - System integrity & stability at risk 
SM49  Execute OS commands - System stability at risk
SU02   Profile Maintenance - System stability and integrity at risk

SAP BC Tips

Get help for your Basis problems
Do you have a SAP Basis Question?

SAP Basis Admin Books
SAP System Administration, Security, Authorization, ALE, Performance Tuning Reference Books

SAP Basis Tips
SAP BC Tips and Basis Components Discussion Forum

Administration In SAP - Sapgui, Unix, SAP ITS, Router, Client Copy and IDES 

Best regards,
SAP Basis, ABAP Programming and Other IMG Stuff
http://www.erpgreat.com

All the site contents are Copyright © www.erpgreat.com and the content authors. All rights reserved.
All product names are trademarks of their respective companies.  The site www.erpgreat.com is in no way affiliated with SAP AG. 
Every effort is made to ensure the content integrity.  Information used on this site is at your own risk. 
 The content on this site may not be reproduced or redistributed without the express written permission of 
www.erpgreat.com or the content authors.