Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture components, including the ABAP stack, SAP GUI, and client concepts.
  • Key distinctions from legacy systems, particularly regarding modular design (FI, MM, SD).
  • Navigation through classic transactions specifically for audit purposes.

Access Management, Roles, and Essential SoD

  • User management and authorization processes using transactions PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions critical to auditing.
  • Basic SoD matrix analysis and common findings, such as combined invoice creation and approval roles.

Security Logs and System Traces

  • Security Audit Log (SM19/SM20): covering activation, filtering, and report generation.
  • STAD and ST03N: analyzing usage statistics, active sessions, and workload patterns.
  • Best practices for retaining and exporting audit evidence.

Configuration Changes and Handling Sensitive Data

  • Monitoring change documents via SCU3 and client settings via SCC4.
  • Identifying and monitoring critical system parameters using RZ10/RZ11.

Process Controls in R/3 (FI/MM/SD)

  • FI module: tolerances, posting periods (OB52), and journal entry approval workflows.
  • MM module: release strategies, purchase order limits, and single supplier controls.
  • SD module: credit limit management, pricing adjustments, and condition monitoring.
  • Applying audit sampling techniques for effective process testing.

Comprehensive Laboratory and Reporting

  • Assessing roles and authorizations for a designated critical user.
  • Tracing operational activities (purchasing/sales) and gathering audit evidence (SM20/SCU3).
  • Documenting findings with supporting screenshots and data exports.
  • Preparing audit working papers and ensuring traceability.

Closure and Action Planning

  • Utilizing the internal control checklist within R/3.
  • Prioritizing audit findings and formulating actionable recommendations.

Deliverables

  • A comprehensive checklist containing over 20 controls across FI/MM/SD modules.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, STAD, and ST03N.

Requirements

  • A solid grasp of fundamental auditing principles
  • Practical experience with SAP systems
  • Knowledge of compliance standards and control frameworks

Target Audience

  • Internal and external auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories