Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Essentials for Auditors (2h)
- Foundational architecture (ABAP, Fiori, catalogs/roles).
-
Significant Differences from ECC:
- Business Partner.
- Universal Journal (ACDOCA).
- Flexible Workflows.
- Current locations for AIS: corresponding transactions and Fiori equivalents.
Module 2 – Access, Roles, and Core SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorization checks via T-codes).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and common audit findings (e.g., creation and release capabilities within a single role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation.
- STAD/ST03N: analyzing usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): conceptual overview and applicable scenarios.
- Best practices for retaining and exporting evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): interpretation and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (posting periods), entry segregation, and journal approval (workflow).
- MM: Release strategies, spending limits, single supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition adjustments.
- BP: Controls on creation/exchange and fiscal/banking data sensitivity.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Lab + Reporting (3h)
- Elevating roles and access permissions for a critical user.
- Tracing operations (buy/sell) and collecting evidence (SM20/SCU3).
- Recording findings with screenshots and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklist for S/4.
- Prioritizing findings and formulating recommendations.
Deliverables:
- Checklist of over 20 controls (FI/MM/SD/BP).
- Quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Working experience with SAP systems
- Knowledge of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
