Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Essential R/3 Concepts for Auditors
- Fundamental architecture, including the ABAP stack, SAP GUI, and client concepts.
- Distinctions from legacy systems, particularly regarding modular design (FI, MM, SD).
- Navigation and transaction execution techniques specific to audit requirements.
Access Management, Roles, and Core SoD
- Managing users and authorizations using tools such as PFCG, SU01, SUIM, SU53, and SU24.
- Designing roles and identifying functions that are critical for auditing.
- Developing basic SoD matrices and recognizing common findings, such as invoice creation and approval within a single role.
Security Logging and Tracing
- Utilizing the Security Audit Log (SM19/SM20) for activation, filtering, and report generation.
- Analyzing usage statistics, sessions, and workloads via STAD and ST03N.
- Best practices for maintaining and exporting audit evidence.
Configuration Modifications and Sensitive Data
- Monitoring change documents (SCU3) and client settings (SCC4).
- Identifying and tracking critical system parameters using RZ10/RZ11.
Process Controls within R/3 (FI/MM/SD)
- FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Implementing release strategies, purchase order limits, and single-supplier controls.
- SD: Monitoring credit limits, pricing alterations, and condition changes.
- Applying audit sampling techniques for effective process testing.
Comprehensive Lab and Reporting
- Assessing the roles and authorizations assigned to a critical user profile.
- Tracing business operations (such as purchasing or sales) and capturing evidence via SM20/SCU3.
- Recording findings with supporting screenshots and data exports.
- Creating working papers and establishing full traceability.
Conclusion and Action Planning
- Reviewing internal control checklists specific to R/3.
- Prioritizing identified findings and developing actionable recommendations.
Course Deliverables
- A comprehensive checklist covering over 20 controls across FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A foundational grasp of core auditing principles.
- Practical experience working with SAP systems.
- Knowledge of established compliance and control frameworks.
Target Audience
- External and internal auditors.
- Internal control specialists.
- SAP security consultants.
- Compliance officers.
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
