Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture concepts (ABAP stack, SAP GUI, and client structure).
- Distinguishing features from legacy systems (modular design spanning FI, MM, SD).
- Navigation and classic transactions relevant to audit activities.
Access Control, Roles, and Core SoD
- User administration and authorization management via PFCG, SU01, SUIM, SU53, and SU24.
- Role architecture and functions with direct audit implications.
- Developing basic SoD matrices and identifying common risks (e.g., combining invoice creation and approval in a single role).
Security Logging and Tracing
- Utilizing the Security Audit Log (SM19/SM20): activation strategies, filtering options, and report generation.
- Leveraging STAD and ST03N for usage statistics, session analysis, and workload monitoring.
- Best practices for retaining and exporting audit evidence.
Configuration Management and Data Sensitivity
- Monitoring change documents (SCU3) and client configurations (SCC4).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls in R/3 (FI/MM/SD)
- FI: Tolerance definitions, posting period management (OB52), and journal entry authorization workflows.
- MM: Release strategies, purchase order thresholds, and single-supplier oversight.
- SD: Credit limit enforcement, pricing adjustments, and condition monitoring.
- Applying sampling techniques for effective process testing.
Integrated Laboratory and Reporting
- Conducting a comprehensive review of roles and authorizations for high-risk users.
- Tracing key operations (purchase/sale) and securing audit evidence (SM20/SCU3).
- Recording findings with supporting screenshots and data exports.
- Preparing working papers and establishing traceability links.
Wrap-up and Action Planning
- Implementing an internal control checklist specifically for R/3.
- Prioritizing audit findings and formulating actionable recommendations.
Key Deliverables
- A comprehensive checklist featuring over 20 controls for FI/MM/SD.
- A practical guide to navigating SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Prior exposure to SAP systems
- Acquaintance with compliance and internal control frameworks
Target Audience
- Auditors
- Internal Control Specialists
- SAP Security Consultants
- Compliance Officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
