Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture (ABAP stack, SAP GUI, and the client concept).
- Key distinctions from legacy systems, particularly regarding modular design (FI, MM, SD).
- Standard transactions and navigation techniques relevant to auditing.
Access, Roles, and Critical SoD
- User management and authorization processes using PFCG, SU01, SUIM, SU53, and SU24.
- Role structuring and functions that are frequently relevant to audits.
- Basics of the SoD matrix and common findings (such as invoice creation and approval within a single role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation procedures, filtering, and reporting.
- STAD and ST03N: analyzing usage statistics, sessions, and workloads.
- Best practices for retaining and exporting evidence.
Configuration Changes and Sensitive Data
- SCU3 (change documents) and SCC4 (client configurations).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Tolerances, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Sampling methods for testing processes.
Comprehensive Laboratory and Reporting
- Auditing the roles and authorizations of a critical user.
- Tracing operations (purchasing/sales) to secure audit evidence (SM20/SCU3).
- Recording findings with supporting screenshots and exports.
- Preparing working papers and ensuring traceability.
Closure and Action Plan
- An internal control checklist tailored for R/3.
- Prioritizing findings and developing recommendations.
Deliverables
- A checklist containing over 20 controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Practical experience with SAP systems
- Knowledge of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
