Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture components (ABAP stack, SAP GUI, client concept).
- Distinctions from legacy systems, including modular design features (FI, MM, SD).
- Standard transactions and navigation techniques applicable to auditing.
Access Management, Roles, and Core SoD
- User administration and authorization management via PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions relevant to audit objectives.
- Basic SoD matrix analysis and common findings (e.g., conflicting invoice creation and approval rights within a single role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering options, and report generation.
- STAD and ST03N: analyzing usage statistics, sessions, and workload distribution.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Change documents (SCU3) and client settings (SCC4).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls in R/3 (FI/MM/SD)
- FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Implementing release strategies, purchase order limits, and single supplier controls.
- SD: Monitoring credit limits, pricing adjustments, and condition records.
- Applying audit sampling techniques for effective process testing.
Comprehensive Laboratory and Reporting
- Reviewing roles and authorizations for critical users.
- Tracing transactions (purchase/sale) and gathering audit evidence (SM20/SCU3).
- Documenting findings with supporting screenshots and data exports.
- Preparing detailed working papers and ensuring traceability.
Closure and Action Planning
- Applying an internal control checklist specific to R/3.
- Prioritizing audit findings and formulating recommendations.
Deliverables
- A comprehensive checklist covering 20+ controls across FI/MM/SD modules.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Prior experience working with SAP systems
- Knowledge of relevant compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
