Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Foundations of R/3 for Audit Professionals
- Core architecture overview (ABAP stack, SAP GUI, and the client model).
- Distinctions from legacy systems, highlighting modular design (FI, MM, SD).
- Navigation through classic transactions specifically for audit purposes.
Access Management, Roles, and SoD Essentials
- User administration and authorization analysis using PFCG, SU01, SUIM, SU53, and SU24.
- Role architecture and key functions relevant to auditing.
- Developing basic SoD matrices and identifying common risks (e.g., dual control over invoice creation and approval).
Security Logs and Trace Analysis
- Managing the Security Audit Log (SM19/SM20): setup, filtering, and report generation.
- Utilizing STAD and ST03N for session analysis, workload monitoring, and usage statistics.
- Best practices for retaining and exporting audit evidence.
Configuration Management and Sensitive Data
- Tracking change documents via SCU3 and reviewing client settings in SCC4.
- Identifying and monitoring critical system parameters using RZ10/RZ11.
Process Controls in R/3 (FI/MM/SD)
- FI: Managing tolerances, posting periods (OB52), and journal entry approval workflows.
- MM: Configuring release strategies, purchase order limits, and single-source controls.
- SD: Monitoring credit limits, pricing adjustments, and condition tables.
- Application of audit sampling methods for process validation.
Comprehensive Lab Session and Reporting
- Evaluating roles and authorizations for a high-risk user profile.
- Tracing operational flows (procurement/sales) and securing evidence via SM20/SCU3.
- Recording findings using screenshots and data exports.
- Creating working papers and ensuring full traceability.
Conclusion and Remediation Planning
- Implementation of an internal control checklist for R/3.
- Prioritizing audit findings and developing actionable recommendations.
Key Deliverables
- A comprehensive checklist covering over 20 controls across FI, MM, and SD.
- A quick-reference guide for SM19/SM20, SUIM, SCU3, STAD, and ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience with SAP environments
- Working familiarity with compliance and control structures
Target Audience
- Professional auditors
- Internal control experts
- SAP security architects
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
