Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture (ABAP, Fiori, catalogs/roles).
-
Key Changes vs. ECC:
- Business Partner model.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current location of AIS: transactions and their Fiori equivalents.
Module 2 – Access, roles and essential SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorizations by transaction code).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and typical findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security logs and traces (3h)
- Security Audit Log (SM19/SM20): activation, filters, and reading.
- STAD/ST03N: usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): concept and application scenarios.
- Best practices for evidence retention and export.
Module 4 – Configuration changes and sensitive data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): reading and obtaining evidence.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: tolerances, OB52 (periods), segregation in entries, journal approval (workflow).
- MM: release strategies, limits, single supplier issues, condition changes.
- SD: Credit limits (FSCM Credit Management), price/condition changes.
- BP: controls on creation/exchange, fiscal/banking sensitivity.
- Risk-driven sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive laboratory + reporting (3h)
- Raise roles and access for a critical user.
- Trace operations (buy/sell) and obtain evidence (SM20/SCU3).
- Document findings with screenshots and exports.
- Preparation of working papers and ensuring traceability.
Module 7 – Closure and action plan (1h)
- Internal control checklist for S/4.
- Prioritization of findings and recommendations.
Deliverables:
- Checklist of 20+ controls (FI/MM/SD/BP).
- Quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A foundational understanding of basic auditing principles
- Prior experience with SAP systems
- Familiarity with compliance and control frameworks
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
