Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture, including the ABAP stack, SAP GUI, and the client concept.
- Key distinctions from legacy systems, particularly the modular design of FI, MM, and SD.
- Navigation and usage of classic transactions for audit purposes.
Access, Roles, and Essential SoD
- User management and authorization via PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions relevant to auditing.
- Basic SoD matrices and common findings, such as invoice creation and approval existing within a single role.
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting capabilities.
- STAD and ST03N: analyzing usage statistics, sessions, and workload.
- Best practices for evidence retention and data export.
Configuration Changes and Sensitive Data
- Utilizing SCU3 (change documents) and SCC4 (client settings).
- Identification and monitoring of critical system parameters via RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Tolerances, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single supplier controls.
- SD: Credit limits, pricing modifications, and condition monitoring.
- Audit sampling techniques for testing processes.
Comprehensive Laboratory + Reporting
- Review of roles and authorizations for critical users.
- Tracing operations (purchase/sale) and gathering audit evidence via SM20/SCU3.
- Documenting findings using screenshots and exports.
- Preparation of working papers and ensuring traceability.
Closure and Action Plan
- Internal control checklist for R/3.
- Prioritization of findings and formulation of recommendations.
Deliverables
- A checklist containing 20+ controls across FI/MM/SD.
- A quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A foundational understanding of basic auditing principles.
- Practical experience with SAP systems.
- Familiarity with compliance and control frameworks.
Target Audience
- Auditors.
- Internal control specialists.
- SAP security consultants.
- Compliance officers.
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
