Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Significant differences from ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current location of Audit Information System (AIS) data: transactions and Fiori equivalents.
Module 2 – Access, Roles, and Essential SoD (2h)
- User management, PFCG, SUIM, SU53, SU24 (authorization analysis by transaction).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrices and common audit findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): configuration, filtering, and interpretation.
- STAD/ST03N: analyzing usage statistics, sessions, and peak activities.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for retaining and exporting audit evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- Change documents (SCU3) and change policies (SCC4).
- Reviewing critical parameters (RZ10/RZ11) and capturing evidence.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerance limits, posting periods (OB52), input segregation, and journal approval workflows.
- MM: Release strategies, approval limits, single-source purchasing, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition adjustments.
- BP: Controls over creation/modification and sensitive fiscal/banking data.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Lab and Reporting (3h)
- Elevating roles and access for a high-risk user profile.
- Tracing operations (purchase/sales) and collecting evidence via SM20/SCU3.
- Documenting findings with screenshots and data exports.
- Preparing working papers and ensuring audit trail traceability.
Module 7 – Conclusion and Action Plan (1h)
- Internal control checklist specific to S/4HANA.
- Prioritizing audit findings and formulating recommendations.
Key Deliverables:
- A comprehensive checklist of over 20 controls covering FI/MM/SD/BP.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Prior experience with SAP systems
- Awareness of compliance and internal control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
