Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture components, including the ABAP stack, SAP GUI, and the client concept.
  • Key distinctions from legacy systems, focusing on modular design (FI, MM, SD).
  • Classic transactions and navigation techniques applied to audit objectives.

Access, Roles, and Essential SoD

  • User management and authorization processes using PFCG, SU01, SUIM, SU53, and SU24.
  • Role design strategies and functions critical to auditing.
  • Basic SoD matrix analysis and typical findings, such as conflicting invoice creation and approval rights in a single role.

Security Logs and Traces

  • Managing the Security Audit Log (SM19/SM20), including activation, filtering, and reporting.
  • Utilizing STAD and ST03N for usage statistics, session tracking, and workload analysis.
  • Best practices for retaining and exporting audit evidence.

Configuration Changes and Sensitive Data

  • Reviewing SCU3 (change documents) and SCC4 (client settings).
  • Identifying and monitoring critical system parameters via RZ10/RZ11.

Process Controls (FI/MM/SD) in R/3

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Implementing release strategies, purchase order limits, and single supplier controls.
  • SD: Monitoring credit limits, pricing changes, and condition records.
  • Applying audit sampling techniques for effective process testing.

Comprehensive Laboratory + Reporting

  • Conducting a detailed review of roles and authorizations for critical users.
  • Tracing purchase and sales operations to gather audit evidence via SM20/SCU3.
  • Documenting findings with appropriate screenshots and data exports.
  • Preparing working papers and establishing full traceability.

Closure and Action Plan

  • Utilizing an internal control checklist specific to R/3.
  • Prioritizing findings and formulating actionable recommendations.

Deliverables

  • A comprehensive checklist containing over 20 controls for FI, MM, and SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A foundational grasp of basic auditing principles
  • Prior experience working with SAP systems
  • Familiarity with compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories