Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Foundations for Auditors
- Core architecture components, including the ABAP stack, SAP GUI, and client concept.
- Key distinctions from legacy systems, emphasizing modular design (FI, MM, SD).
- Standard transactions and navigation techniques relevant to auditing.
Access Management, Roles, and Core SoD
- User management and authorization frameworks using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions critical for audit assurance.
- Basic SoD matrices and common risk scenarios (e.g., a single role possessing both invoice creation and approval capabilities).
Security Logs and Tracing
- Security Audit Log (SM19/SM20): configuration, filtering, and reporting strategies.
- STAD and ST03N: analyzing usage statistics, sessions, and system workload.
- Best practices for retaining and exporting audit evidence.
Configuration Management and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings) for tracking modifications.
- Identifying and monitoring critical system parameters via RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Managing tolerances, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Application of audit sampling techniques for process testing.
Comprehensive Laboratory and Reporting
- Reviewing roles and authorizations for high-risk users.
- Tracing operations (purchase/sale) and securing audit evidence (SM20/SCU3).
- Documenting findings with visual evidence and system exports.
- Preparation of working papers and ensuring full traceability.
Conclusion and Action Planning
- Developing an internal control checklist specific to R/3.
- Prioritizing audit findings and formulating actionable recommendations.
Course Deliverables
- A comprehensive checklist containing 20+ controls for FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Prior experience working with SAP systems
- Familiarity with standard compliance and control frameworks
Intended Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
