Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Session 1 (4h)
Module 1 – R/3 Fundamentals for Auditors (2h)
- Overview of basic architecture (ABAP stack, SAP GUI, and client concepts).
- Key distinctions from legacy systems (modular design: FI, MM, SD).
- Classic transactions and navigation techniques for audit purposes.
Module 2 – Access, Roles, and Essential SoD (2h)
- User management and authorizations using PFCG, SU01, SUIM, SU53, and SU24.
- Role design and common audit-relevant functions.
- Introduction to basic SoD matrices and typical findings (e.g., invoice creation and approval within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and reporting.
- STAD and ST03N: analyzing usage statistics, sessions, and workload.
- Best practices for evidence retention and export.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents) and SCC4 (client settings).
- Critical system parameters (RZ10/RZ11): identification and monitoring.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in R/3 (4h)
- FI: managing tolerances, OB52 (posting periods), and journal entry approvals.
- MM: implementing release strategies, purchase order limits, and single supplier controls.
- SD: handling credit limits, pricing changes, and conditions monitoring.
- Applying audit sampling techniques for process testing.
Session 4 (4h)
Module 6 – Comprehensive Laboratory + Reporting (3h)
- Reviewing roles and authorizations for a critical user.
- Tracing operations (purchase/sale) and obtaining audit evidence via SM20/SCU3.
- Documenting findings with screenshots and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and Action Plan (1h)
- Utilizing an internal control checklist for R/3.
- Prioritizing findings and recommendations.
Deliverables:
- A checklist covering 20+ controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Summary and Next Steps
Requirements
- A solid understanding of fundamental auditing principles.
- Practical experience working with SAP systems.
- Familiarity with compliance and control frameworks.
Audience
- Auditors.
- Internal control specialists.
- SAP security consultants.
- Compliance officers.
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
