Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Explore the basic architecture, including the ABAP stack, SAP GUI, and client structure.
  • Identify key distinctions from legacy systems, focusing on modular designs such as FI, MM, and SD.
  • Master classic transactions and navigation techniques tailored for audit activities.

Access Management, Roles, and Essential SoD

  • Manage user roles and authorizations using tools like PFCG, SU01, SUIM, SU53, and SU24.
  • Design roles that address common audit-critical functions.
  • Analyze basic Segregation of Duties (SoD) matrices and identify typical findings, such as conflicting invoice creation and approval rights.

Security Logs and Traces

  • Utilize the Security Audit Log (SM19/SM20) for activation, filtering, and reporting purposes.
  • Leverage STAD and ST03N to analyze usage statistics, session data, and system workload.
  • Implement best practices for retaining and exporting audit evidence.

Configuration Changes and Sensitive Data

  • Monitor change documents via SCU3 and review client settings in SCC4.
  • Identify and track critical system parameters using RZ10/RZ11.

Process Controls (FI/MM/SD) in R/3

  • FI: Evaluate tolerance levels, posting periods (OB52), and journal entry approval workflows.
  • MM: Assess release strategies, purchase order limits, and single supplier controls.
  • SD: Review credit limits, pricing modifications, and condition monitoring.
  • Apply audit sampling techniques to test process integrity.

Comprehensive Laboratory and Reporting

  • Conduct a review of roles and authorizations for critical user profiles.
  • Trace operations for purchases and sales to gather audit evidence using SM20/SCU3.
  • Record findings with appropriate screenshots and data exports.
  • Prepare working papers and ensure full traceability of audit procedures.

Closure and Action Planning

  • Utilize an internal control checklist specific to R/3 environments.
  • Prioritize findings and formulate actionable recommendations.

Deliverables

  • A comprehensive checklist containing over 20 controls for FI/MM/SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A foundational understanding of basic auditing principles
  • Prior experience working with SAP systems
  • Familiarity with compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories