As observation 'WI-IT-013 Create Account for SAP', we noted that the following policy and procedures relevant to access administration are prepared. There is 'SAP ID Request' form used for creating user IDs for SAP application. This form need to be signed by requester and approved by requester's Owner/ Manager or AGM/ GM. After that, it will be signed by IT department as creator or functional, and approved by IT manager before creating SAP user IDs.