Entwicklung von Datenschutzrollen für das AIS im SAP ERP

In the context of this thesis, data protection roles for the Audit Information System in SAP ERP are being developed. These roles are primarily intended to enable the data protection officer to monitor the proper application of programs within an SAP ERP system. The data protection officer must assess the SAP system for compliance with data protection regulations, specifically checking system settings, the storage of personal data, and the authorization concept. The Audit Information System, which is delivered with SAP ERP, serves this purpose. This thesis focuses on analyzing the standard roles of the Audit Information System (AIS) based on the legal requirements from the Federal Data Protection Act, Solvency II, and other guidelines. Based on this analysis, new AIS roles will be designed that allow the operational data protection officer to conduct a complete review of the SAP ERP system with read-only access. Guidance will be provided on the assignment or specification of these roles.