Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Essential architecture components, including the ABAP stack, SAP GUI, and the client concept.
- Distinguishing features compared to legacy systems, such as modular design encompassing FI, MM, and SD.
- Standard transactions and navigation methods specifically applied to audit activities.
Access, Roles, and Core SoD Principles
- Managing user access and authorizations using tools like PFCG, SU01, SUIM, SU53, and SU24.
- Structuring roles to address key audit functions.
- Developing a basic Segregation of Duties (SoD) matrix and identifying typical issues, such as combining invoice creation and approval within a single role.
Security Logging and Tracing
- Utilizing the Security Audit Log (SM19/SM20) for activation, filtering, and report generation.
- Analyzing usage statistics, sessions, and workload using STAD and ST03N.
- Applying best practices for retaining and exporting audit evidence.
Configuration Management and Sensitive Data
- Monitoring changes through SCU3 (change documents) and reviewing SCC4 (client settings).
- Identifying and overseeing critical system parameters via RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Implementing release strategies, purchase order limits, and single supplier controls.
- SD: Enforcing credit limits, managing pricing changes, and monitoring conditions.
- Employing audit sampling techniques for effective process testing.
Comprehensive Laboratory and Reporting
- Assessing roles and authorizations for high-risk users.
- Tracking purchase and sale operations to gather audit evidence using SM20 and SCU3.
- Recording findings using screenshots and data exports.
- Creating working papers and ensuring full traceability.
Conclusion and Action Planning
- Applying an internal control checklist specific to R/3.
- Prioritizing identified findings and formulating recommendations.
Deliverables
- A checklist containing over 20 controls for FI/MM/SD.
- A concise guide for using SM19/SM20, SUIM, SCU3, STAD, and ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience with SAP systems
- Working familiarity with compliance and control frameworks
Target Audience
- Internal and external auditors
- Specialists in internal controls
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
