Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Basics for Auditors
- Foundational architecture (ABAP stack, SAP GUI, client concept).
- Key distinctions from legacy systems (modular design: FI, MM, SD).
- Standard transactions and navigation methods for audit tasks.
Access, Roles, and Critical SoD
- User management and authorization setup using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and common functions relevant to auditing.
- Basics of the SoD matrix and typical findings (e.g., combining invoice creation and approval within the same role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting capabilities.
- STAD and ST03N: Analysis of usage statistics, sessions, and workload.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings).
- Identification and monitoring of critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Tolerance settings, OB52 (posting periods), and journal entry approval workflows.
- MM: Release strategies, purchase order limits, and single supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Sampling techniques for effective process testing.
Comprehensive Lab and Reporting
- Review of roles and authorizations for a critical user profile.
- Tracing operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
- Documentation of findings including screenshots and data exports.
- Preparation of working papers and ensuring traceability.
Conclusion and Action Plan
- Internal control checklist specific to R/3.
- Prioritization of findings and formulation of recommendations.
Deliverables
- A checklist containing 20+ controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid understanding of fundamental auditing principles
- Practical experience with SAP systems
- Knowledge of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical
