Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Basics for Audit Professionals
- Core architecture components (ABAP stack, SAP GUI, client concept).
- Key distinctions from legacy systems (modular design: FI, MM, SD).
- Standard transactions and navigation techniques for auditing.
Access Management, Roles, and Core SoD
- User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and common functions relevant to audits.
- Basic SoD matrices and typical issues (e.g., combining invoice creation and approval within a single role).
Security Logs and Tracing
- Security Audit Log (SM19/SM20): configuration, filtering, and reporting capabilities.
- STAD and ST03N: analyzing usage statistics, sessions, and workload patterns.
- Best practices for retaining and exporting evidence.
Configuration Modifications and Sensitive Information
- SCU3 (change documents) and SCC4 (client configuration).
- Critical system parameters (RZ10/RZ11): identification and continuous monitoring.
Process Controls (FI/MM/SD) in R/3
- FI: tolerance levels, OB52 (posting periods), and journal entry approval workflows.
- MM: release strategies, purchase order limits, and controls for single suppliers.
- SD: credit limits, price adjustments, and monitoring of conditions.
- Auditing sampling methods for process validation.
Comprehensive Lab Work + Reporting
- Evaluating roles and authorizations for key users.
- Tracking operations (purchase/sale) and securing audit evidence (SM20/SCU3).
- Recording findings with screenshots and data exports.
- Creating working papers and ensuring traceability.
Conclusion and Action Planning
- Internal control checklist specific to R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- Checklist containing 20+ controls (FI/MM/SD).
- Rapid reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Hands-on experience with SAP systems
- Working familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control experts
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
