Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Foundations for Auditors
- Core architecture, including the ABAP stack, SAP GUI, and the client concept.
- Key distinctions from legacy systems, focusing on modular design (FI, MM, SD).
- Navigation and execution of classic transactions for audit objectives.
Access Control, Roles, and Fundamental SoD
- User management and authorization techniques using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions critical to auditing.
- Basics of SoD matrices and common audit findings (e.g., combining invoice creation and approval within a single role).
Security Logs and Tracing
- Utilizing the Security Audit Log (SM19/SM20): activation, filtering, and reporting methods.
- Employing STAD and ST03N for usage statistics, session analysis, and workload monitoring.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data Management
- Monitoring change documents via SCU3 and client settings through SCC4.
- Identifying and overseeing critical system parameters using RZ10/RZ11.
Process Controls in R/3 (FI/MM/SD)
- FI: Managing tolerances, OB52 (posting periods), and journal entry approval workflows.
- MM: Implementing release strategies, purchase order limits, and single supplier controls.
- SD: Enforcing credit limits, monitoring pricing changes, and tracking conditions.
- Application of audit sampling techniques for process validation.
Comprehensive Lab Exercises + Reporting
- Auditing the roles and authorizations assigned to a critical user profile.
- Tracing operational activities (purchase/sale cycles) and gathering audit evidence (SM20/SCU3).
- Documenting findings through screenshots and data exports.
- Preparing working papers and ensuring full traceability.
Closure and Action Planning
- Utilizing the internal control checklist specific to R/3.
- Prioritizing audit findings and formulating actionable recommendations.
Deliverables
- A comprehensive checklist covering 20+ controls across FI/MM/SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles.
- Working experience with SAP systems.
- Awareness of compliance standards and control frameworks.
Target Audience
- Auditors.
- Internal control specialists.
- SAP security consultants.
- Compliance officers.
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
