Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture components, including the ABAP stack, SAP GUI, and the client concept.
- Key distinctions from legacy systems, focusing on modular design (FI, MM, SD).
- Classic transactions and navigation techniques applied to audit objectives.
Access, Roles, and Essential SoD
- User management and authorization processes using PFCG, SU01, SUIM, SU53, and SU24.
- Role design strategies and functions critical to auditing.
- Basic SoD matrix analysis and typical findings, such as conflicting invoice creation and approval rights in a single role.
Security Logs and Traces
- Managing the Security Audit Log (SM19/SM20), including activation, filtering, and reporting.
- Utilizing STAD and ST03N for usage statistics, session tracking, and workload analysis.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Reviewing SCU3 (change documents) and SCC4 (client settings).
- Identifying and monitoring critical system parameters via RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Implementing release strategies, purchase order limits, and single supplier controls.
- SD: Monitoring credit limits, pricing changes, and condition records.
- Applying audit sampling techniques for effective process testing.
Comprehensive Laboratory + Reporting
- Conducting a detailed review of roles and authorizations for critical users.
- Tracing purchase and sales operations to gather audit evidence via SM20/SCU3.
- Documenting findings with appropriate screenshots and data exports.
- Preparing working papers and establishing full traceability.
Closure and Action Plan
- Utilizing an internal control checklist specific to R/3.
- Prioritizing findings and formulating actionable recommendations.
Deliverables
- A comprehensive checklist containing over 20 controls for FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A foundational grasp of basic auditing principles
- Prior experience working with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical