Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Foundations of R/3 for Auditors
- Core architecture concepts, including the ABAP stack, SAP GUI, and the client concept.
- Distinguishing features from legacy systems, particularly its modular design spanning FI, MM, and SD.
- Navigating classic transactions specifically for audit purposes.
Access Management, Roles, and SoD Essentials
- Managing users and authorizations through PFCG, SU01, SUIM, SU53, and SU24.
- Designing roles and identifying functions most relevant to audits.
- Understanding basic SoD matrices and recognizing common findings, such as conflicting invoice creation and approval permissions.
Security Logs and System Traces
- Utilizing the Security Audit Log (SM19/SM20) for activation, filtering, and reporting.
- Applying STAD and ST03N for analyzing usage statistics, sessions, and system workload.
- Best practices for retaining and exporting evidence.
Configuration Changes and Sensitive Data Handling
- Reviewing change documents via SCU3 and client settings in SCC4.
- Identifying and monitoring critical system parameters using RZ10/RZ11.
Process Controls in R/3 (FI/MM/SD)
- FI: Reviewing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Evaluating release strategies, purchase order limits, and single supplier controls.
- SD: Monitoring credit limits, pricing adjustments, and condition records.
- Applying audit sampling techniques for effective process testing.
Comprehensive Lab Work and Reporting
- Conducting a thorough review of roles and authorizations for high-risk users.
- Tracing business operations (such as purchases and sales) to gather audit evidence via SM20 and SCU3.
- Recording findings with supporting screenshots and data exports.
- Compiling working papers and ensuring full traceability.
Conclusion and Action Planning
- Implementing an internal control checklist for R/3 environments.
- Prioritizing audit findings and formulating actionable recommendations.
Course Deliverables
- A comprehensive checklist containing over 20 controls for FI, MM, and SD.
- A quick-reference guide for key transactions including SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid foundation in fundamental auditing principles
- Hands-on experience working with SAP systems
- Knowledge of established compliance and internal control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
