Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Foundational architecture (ABAP stack, SAP GUI, client concept).
- Distinctions from legacy systems, particularly the modular design covering FI, MM, and SD.
- Navigation and classic transactions tailored for audit purposes.
Access, Roles, and Essential SoD
- User management and authorizations using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and common functions relevant to audits.
- Basic SoD matrices and typical findings, such as invoice creation and approval within the same role.
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting capabilities.
- STAD and ST03N: analyzing usage statistics, sessions, and workload.
- Best practices for retaining and exporting evidence.
Configuration Changes and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings).
- Identification and monitoring of critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Tolerances, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single supplier controls.
- SD: Credit limits, pricing adjustments, and conditions monitoring.
- Audit sampling techniques for testing processes.
Comprehensive Laboratory + Reporting
- Reviewing roles and authorizations for a critical user.
- Tracing operations (purchase/sale) and gathering audit evidence via SM20/SCU3.
- Documenting findings using screenshots and data exports.
- Preparing working papers and ensuring traceability.
Closure and Action Plan
- Internal control checklist specific to R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- A checklist containing 20+ controls across FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Understanding of fundamental auditing principles
- Experience working with SAP systems
- Familiarity with compliance and control frameworks
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
