Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture (ABAP stack, SAP GUI, client concept).
- Key distinctions from legacy systems (modular design: FI, MM, SD).
- Navigation and classic transactions tailored for audit purposes.
Access, Roles, and Essential SoD
- User management and authorization via PFCG, SU01, SUIM, SU53, and SU24.
- Role design and functions critical to audit objectives.
- Foundational SoD matrices and common audit findings (e.g., combining invoice creation and approval in a single role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): configuration, filtering, and reporting.
- STAD and ST03N: analyzing usage statistics, sessions, and workload.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Managing change documents (SCU3) and client settings (SCC4).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Tolerances, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single-supplier controls.
- SD: Credit limits, pricing adjustments, and conditions monitoring.
- Application of audit sampling techniques for process validation.
Practical Laboratory and Reporting
- Reviewing roles and authorizations for a designated critical user.
- Tracing operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
- Documenting findings with relevant screenshots and data exports.
- Preparing comprehensive working papers and ensuring traceability.
Conclusion and Action Planning
- Internal control checklist specific to R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- A checklist containing over 20 controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Practical experience with SAP systems
- Working knowledge of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical
