Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Basic architecture (ABAP, Fiori, catalogs/roles).
-
Key Changes vs. ECC:
- Business Partner.
- Universal Journal (ACDOCA).
- Flexible Workflows.
- Current AIS locations: transactions and their Fiori equivalents.
Module 2 – Access, roles and essential SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorizations by transaction code).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and typical findings (e.g. creation and release in the same role).
Session 2 (4h)
Module 3 – Security logs and traces (3h)
- Security Audit Log (SM19/SM20): activation, filters, and reading.
- STAD/ST03N: usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): concept and application scenarios.
- Best practices for evidence retention and export.
Module 4 – Configuration changes and sensitive data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): interpretation and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: tolerances, OB52 (periods), segregation in entries, and journal approval (workflow).
- MM: release strategies, limits, single supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: controls on creation/exchange, and fiscal/banking sensitivity.
- Risk-driven sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive laboratory + reporting (3h)
- Elevate the roles and access of a critical user.
- Trace operations (buy/sell) and gather evidence (SM20/SCU3).
- Document findings using captures and exports.
- Prepare working papers and ensure traceability.
Module 7 – Closure and action plan (1h)
- Internal control checklist for S/4.
- Prioritization of findings and recommendations.
Deliverables:
- A checklist of over 20 controls (FI/MM/SD/BP).
- A quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A solid grasp of basic auditing principles
- Prior experience with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
