Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Foundational architecture (ABAP, Fiori, catalogs/roles).
-
Key Differences from ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current status of AIS: transactions and their Fiori equivalents.
Module 2 – Access, Roles, and Core SoD (2h)
- User management, PFCG, SUIM, SU53, SU24 (authorizations by transaction code).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and common findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation.
- STAD/ST03N: analyzing usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for retaining and exporting evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): review and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (periods), entry segregation, journal approval (workflow).
- MM: Release strategies, limits, single supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls on creation/exchange and fiscal/banking sensitivity.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Laboratory and Reporting (3h)
- Escalating roles and access for a critical user.
- Tracing operations (buy/sell) and gathering evidence (SM20/SCU3).
- Documenting findings using captures and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Wrap-up and Action Plan (1h)
- Internal control checklist for S/4.
- Prioritizing findings and formulating recommendations.
Deliverables:
- A checklist containing 20+ controls (FI/MM/SD/BP).
- A quick guide to SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Familiarity with SAP systems
- Working knowledge of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
