Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R\/3 Foundations for Auditors
- Core architecture components (ABAP stack, SAP GUI, client structure).
- Key distinctions from legacy systems (modular design covering FI, MM, SD).
- Essential transactions and navigation techniques for audit purposes.
Access Control, Roles, and Core SoD
- User administration and authorization management via PFCG, SU01, SUIM, SU53, and SU24.
- Role architecture and functions critical to audit review.
- Basic SoD matrices and common risk findings (e.g., a single role holding both invoice creation and approval rights).
Security Logging and Tracing
- Security Audit Log (SM19\/SM20): enabling features, filtering options, and report generation.
- STAD and ST03N: analyzing usage statistics, sessions, and workload distribution.
- Best practices for retaining and exporting audit evidence.
Configuration Modifications and Sensitive Information
- Monitoring change documents (SCU3) and client-specific settings (SCC4).
- Identifying and monitoring critical system parameters (RZ10\/RZ11).
Process Controls (FI\/MM\/SD) in R\/3
- FI: Tolerance limits, posting period management (OB52), and journal entry authorization.
- MM: Release strategies, purchase order thresholds, and controls for single-supplier transactions.
- SD: Credit limit enforcement, pricing modifications, and condition monitoring.
- Application of audit sampling techniques for process validation.
Integrated Laboratory Session + Reporting
- Reviewing roles and authorizations for high-risk users.
- Tracing transactional flows (purchase\/sales) and collecting audit evidence (SM20\/SCU3).
- Recording findings using screenshots and data exports.
- Creating working papers and ensuring full traceability.
Conclusion and Action Planning
- Internal control checklists specific to R\/3.
- Prioritizing identified risks and formulating recommendations.
Course Deliverables
- A checklist containing over 20 controls for FI\/MM\/SD modules.
- A quick-reference guide for SM19\/SM20, SUIM, SCU3, STAD\/ST03N.
Requirements
- A solid grasp of fundamental auditing principles.
- Hands-on experience with SAP systems.
- Knowledge of compliance standards and control frameworks.
Target Audience
- Internal and external auditors.
- Internal control specialists.
- SAP security consultants.
- Compliance officers.
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
