Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Distinctive changes compared to ECC:
- Implementation of the Business Partner concept.
- Adoption of the Universal Journal (ACDOCA).
- Enhanced flexibility in workflows.
- Current location of AIS: relevant transactions and their Fiori equivalents.
Module 2 – Access, Roles, and Essential SoD (2h)
- Managing users, PFCG, SUIM, SU53, and SU24 (authorization checks by transaction code).
- Structuring Fiori catalogs and roles (app-id, catalog, space).
- Establishing a basic SoD matrix and identifying common issues (e.g., conflicting creation and release permissions within a single role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Managing the Security Audit Log (SM19/SM20): activation, filtering, and analysis.
- Utilizing STAD/ST03N for usage statistics, session tracking, and peak activity monitoring.
- Understanding Read Access Logging (RAL): its purpose and appropriate application contexts.
- Best practices for retaining and exporting evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- Reviewing SCU3 (change documents) and SCC4 (change policies).
- Interpreting critical parameters (RZ10/RZ11) and collecting supporting evidence.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (posting periods), entry segregation, and journal approvals via workflow.
- MM: Release strategies, spending limits, single supplier management, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls over creation/modification, with focus on fiscal and banking sensitivity.
- Application of risk-based sampling and selection methods.
Session 4 (4h)
Module 6 – Comprehensive Lab + Reporting (3h)
- Escalating roles and access rights for a critical user.
- Tracing operations (buy/sell) and securing evidence (SM20/SCU3).
- Documenting findings with screenshots and data exports.
- Preparing working papers and ensuring traceability.
Module 7 – Conclusion and Action Plan (1h)
- Applying an internal control checklist specific to S/4.
- Prioritizing findings and formulating recommendations.
Deliverables:
- A checklist containing over 20 controls (FI/MM/SD/BP).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Prior experience with SAP systems
- Working familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
