1. Would you rate this risk as ‘High’ or ‘Medium’ priority? Please motivate! (Tip: think about the potential additional control to be implemented to mitigate the SOD risk.
- The risk is in inaccurate pricing and incomplete billing of quantities. If the SAP configuration is such that pricing cannot be changed at order entry or billing the risk is medium. Else we would rate this risk as high due to immediate loss of value for the company.