SAP Trust Center
SAP Application Management Services SOC 1 (ISAE3402) Audit Report 2019 H2
The scope of this SOC report includes the SAP Application Management Services solutions offered in Germany, United States, Japan, Australia, Singapore, India, Brazil and Mexico.
SAP Application Management Services (AMS) provide company-specific post-implementation support, optimization and improvement to manage day-to-day application, technical and database operations. Through a long-term relationship based on Service Level Agreements (SLA) companies can focus on strategic initiatives and rely on 24/7 SAP expertise, high availability and optimal performance of their IT solution at lower Total Cost of Operations (TCO).
SAP Application Management Services will be delivered for a customer’s SAP HANA Enterprise Cloud environment, for on premise solutions and for a cloud infrastructure that is not hosted in an SAP Data Center.
Beside SAP AMS the Service Report covers also SAP EMS – Enhanced Managed Services (EMS) offers HEC customers to request a larger scope of managed services. EMS is agreed in a customer’s HEC contract and excludes all services involving the extension, reduction, or change of the customer’s existing HEC landscape.
SOC1 reports specifically address service organizations internal control over financial reporting and controls specified by the service provider. The SOC1 reports are intended solely for the information and use of existing user entities (for ex. Exiting customers of the service organization), their financial statement auditors and management of the service organization. SOC 1 reports are prepared in accordance with Statement on Standards for Attestation Engagements (SSAE) No.18, a new guidance that the auditors use to conduct a SOC1 engagement. SOC1 Type 1 covers management’s description of a service organization’s system and the suitability of the design of controls at a specific point in time, whereas a SOC1 Type 2 also includes the operating effectiveness of controls for a dedicated period of time.
SAP Application Management Services has regularly prepared SOC1 Type 2 audit reports by an independent 3rd party accountant. This version of the report covers the audit period 1. June 2019 to 30. November 2019, the locations Germany, United States, Japan, Australia, India, Brazil and Mexico.
The use of these reports is restricted. A copy of this report is available for all SAP Application Management Services customers who had productive and had financially-relevant systems during the audit period covered by the report.