Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture, including the ABAP stack, SAP GUI, and client concepts.
  • Key distinctions from legacy systems, such as modular design (FI, MM, SD).
  • Navigating classic transactions for audit-specific purposes.

Access, Roles, and Essential SoD

  • User management and authorization using PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions relevant to auditing.
  • Basic SoD matrices and common findings, such as invoice creation and approval within the same role.

Security Logs and Traces

  • Security Audit Log (SM19/SM20): activation, filtering, and reporting mechanisms.
  • STAD and ST03N: Analyzing usage statistics, sessions, and workload.
  • Best practices for retaining and exporting evidence.

Configuration Changes and Sensitive Data

  • Managing change documents via SCU3 and client settings through SCC4.
  • Identifying and monitoring critical system parameters using RZ10/RZ11.

Process Controls (FI/MM/SD) in R/3

  • FI: Managing tolerances, OB52 (posting periods), and journal entry approvals.
  • MM: Implementing release strategies, purchase order limits, and single supplier controls.
  • SD: Monitoring credit limits, pricing changes, and conditions.
  • Applying audit sampling techniques for effective process testing.

Comprehensive Laboratory + Reporting

  • Reviewing roles and authorizations for critical users.
  • Tracing purchase and sales operations to gather audit evidence (SM20/SCU3).
  • Documenting findings with supporting screenshots and exports.
  • Preparing working papers and ensuring full traceability.

Closure and Action Plan

  • Applying internal control checklists within R/3.
  • Prioritizing findings and developing actionable recommendations.

Deliverables

  • A comprehensive checklist of 20+ controls covering FI/MM/SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.

Requirements

  • Familiarity with fundamental auditing principles
  • Hands-on experience with SAP systems
  • Knowledge of compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories