<?xml version="1.0" encoding="UTF-8"?><marc:collection xmlns:marc="http://www.loc.gov/MARC21/slim">
  <marc:record>
    <marc:leader>00000nam  2200000zi 4500</marc:leader>
    <marc:controlfield tag="001">9.935624</marc:controlfield>
    <marc:controlfield tag="003">CaOODSP</marc:controlfield>
    <marc:controlfield tag="005">20250507091345</marc:controlfield>
    <marc:controlfield tag="006">m     o  d f      </marc:controlfield>
    <marc:controlfield tag="007">cr mn|||||||||</marc:controlfield>
    <marc:controlfield tag="008">240319e201109##onc     o    f000 0 eng d</marc:controlfield>
    <marc:datafield tag="040" ind1=" " ind2=" ">
      <marc:subfield code="a">CaOODSP</marc:subfield>
      <marc:subfield code="b">eng</marc:subfield>
      <marc:subfield code="e">rda</marc:subfield>
      <marc:subfield code="c">CaOODSP</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="043" ind1=" " ind2=" ">
      <marc:subfield code="a">n-cn---</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="086" ind1="1" ind2=" ">
      <marc:subfield code="a">H14-122/2011-1E-PDF</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="245" ind1="0" ind2="0">
      <marc:subfield code="a">Management response and action plan : </marc:subfield>
      <marc:subfield code="b">audit of SAP general computer controls.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="246" ind1="1" ind2="0">
      <marc:subfield code="a">Audit of SAP general computer controls</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="264" ind1=" " ind2="1">
      <marc:subfield code="a">[Ottawa] : </marc:subfield>
      <marc:subfield code="b">Health Canada, </marc:subfield>
      <marc:subfield code="c">September 2011.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="300" ind1=" " ind2=" ">
      <marc:subfield code="a">1 online resource (4 pages)</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="336" ind1=" " ind2=" ">
      <marc:subfield code="a">text</marc:subfield>
      <marc:subfield code="b">txt</marc:subfield>
      <marc:subfield code="2">rdacontent</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="337" ind1=" " ind2=" ">
      <marc:subfield code="a">computer</marc:subfield>
      <marc:subfield code="b">c</marc:subfield>
      <marc:subfield code="2">rdamedia</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="338" ind1=" " ind2=" ">
      <marc:subfield code="a">online resource</marc:subfield>
      <marc:subfield code="b">cr</marc:subfield>
      <marc:subfield code="2">rdacarrier</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">Caption title.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="500" ind1=" " ind2=" ">
      <marc:subfield code="a">Issued also in French under title: Réponse et plan d’action de la direction : vérification des contrôles généraux du SAP.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="520" ind1=" " ind2=" ">
      <marc:subfield code="a">"While the form for special access requests does not always provide the full details on the purpose of the requests, other documentation and communication outside of the form provide the context and rationale for the requests in the form of emails or verbal communications. The additional information provides the approver with enough information to make an informed decision. Going forward staff will be reminded to include text describing the purpose and/or objective of special access requests within the form. SAP Security will update their procedures to include the turning on of the “User Trace” feature and to copy the results in the Special Access Request form"--Management response and planned actions, page 1.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="610" ind1="1" ind2="0">
      <marc:subfield code="a">Canada. </marc:subfield>
      <marc:subfield code="b">Health Canada</marc:subfield>
      <marc:subfield code="x">Auditing.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="650" ind1=" " ind2="0">
      <marc:subfield code="a">Computer programs</marc:subfield>
      <marc:subfield code="z">Canada</marc:subfield>
      <marc:subfield code="x">Auditing.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="710" ind1="1" ind2=" ">
      <marc:subfield code="a">Canada. </marc:subfield>
      <marc:subfield code="b">Health Canada, </marc:subfield>
      <marc:subfield code="e">issuing body.</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="775" ind1="0" ind2="8">
      <marc:subfield code="t">Réponse et plan d’action de la direction : </marc:subfield>
      <marc:subfield code="w">(CaOODSP)9.935626</marc:subfield>
    </marc:datafield>
    <marc:datafield tag="856" ind1="4" ind2="0">
      <marc:subfield code="q">PDF</marc:subfield>
      <marc:subfield code="s">23 KB</marc:subfield>
      <marc:subfield code="u">https://publications.gc.ca/collections/collection_2024/sc-hc/H14-122-2011-1-eng.pdf</marc:subfield>
    </marc:datafield>
  </marc:record>
</marc:collection>
