Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Foundations for Auditors
- Core architecture concepts (ABAP stack, SAP GUI, client structure).
- Distinctions from legacy systems, particularly modular design in FI, MM, and SD.
- Standard transactions and navigation techniques for audit tasks.
Access Management, Roles, and Critical SoD
- User management and authorization handling using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions relevant to auditing.
- Basic SoD matrices and typical findings, such as combining invoice creation and approval within a single role.
Security Logs and Tracing
- Security Audit Log (SM19/SM20): enabling, filtering, and reporting capabilities.
- Utilizing STAD and ST03N for usage statistics, session analysis, and workload monitoring.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Managing change documents via SCU3 and client settings through SCC4.
- Identifying and monitoring critical system parameters using RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Tolerance settings, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single-supplier controls.
- SD: Credit limits, pricing modifications, and condition monitoring.
- Audit sampling methods for effective process testing.
Comprehensive Laboratory and Reporting
- Reviewing roles and authorizations for high-privilege users.
- Tracing purchase and sale operations to gather audit evidence (SM20/SCU3).
- Documenting findings with screenshots and data exports.
- Preparing working papers and ensuring full traceability.
Conclusion and Action Planning
- Internal control checklists specific to R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- A checklist containing over 20 controls covering FI/MM/SD.
- A quick-reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A foundational understanding of auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and internal control frameworks
Target Audience
- Internal and external auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
