c. What would be your decision for the rules set definition for each of the following situations:
• Your company has a shared service centre for master data maintenance: would not make a difference: still the combination would need to be avoided also for shared service centre users.
• Dual control (‘confirm change’) for vendor master changes has been configured in your company’s SAP system: the risk level could be downgraded from High to Medium
• Purchase orders in your company are subject to PO release configuration: the risk level could be downgraded from High to Medium
• Users in your company work cross company code/plant: the roles assigned are such that they cannot maintain purchase orders for vendors of the plant/ company code that they can maintain master data for: organizational rules would need to be defined to only flag violations within a company code/ plant and as such avoid false positives