Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours (2 days)
Course Outline
R/3 Fundamentals for Auditors
- Foundational architecture including the ABAP stack, SAP GUI, and client concepts.
- Key distinctions from legacy systems, particularly in modular design (FI, MM, SD).
- Use of classic transactions and navigation techniques for audit purposes.
Access, Roles, and Essential SoD
- User management and authorization concepts using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and common audit-relevant functionalities.
- Basic SoD matrix analysis and typical findings, such as conflicting invoice creation and approval roles.
Security Logs and Traces
- Managing the Security Audit Log (SM19/SM20), including activation, filtering, and reporting.
- Utilizing STAD and ST03N for usage statistics, session analysis, and workload monitoring.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Managing change documents (SCU3) and client settings (SCC4).
- Identifying and monitoring critical system parameters via RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Implementing release strategies, purchase order limits, and single supplier controls.
- SD: Monitoring credit limits, pricing changes, and conditions.
- Applying audit sampling techniques for effective process testing.
Comprehensive Laboratory + Reporting
- Reviewing roles and authorizations for critical users.
- Tracing operations (such as purchases or sales) to gather audit evidence via SM20/SCU3.
- Documenting findings using screenshots and data exports.
- Preparing working papers and ensuring full traceability.
Closure and Action Plan
- Implementing an internal control checklist within R/3.
- Prioritizing findings and developing actionable recommendations.
Deliverables
- A comprehensive checklist of over 20 controls covering FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Familiarity with fundamental auditing principles
- Practical experience with SAP systems
- Knowledge of compliance and internal control frameworks
Target Audience
- External and internal auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
