Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Basics for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Key differences from ECC:
- Business Partner integration.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current access points: transaction codes and their Fiori equivalents.
Module 2 – Access Management, Roles, and Core SoD (2h)
- User management, PFCG, SUIM, SU53, SU24 (authorizations by transaction).
- Fiori catalogs and role structures (app-id, catalog, space).
- Basic SoD matrix analysis and common audit findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security Logs and Tracing (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation.
- STAD/ST03N: analyzing usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for evidence retention and data export.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents) and SCC4 (change policies).
- Critical parameters (RZ10/RZ11): review and evidencing.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerance settings, OB52 (posting periods), entry segregation, and journal approvals (workflow).
- MM: Release strategies, limit settings, single-source purchasing, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition adjustments.
- BP: Controls on creation/modification, and fiscal/banking data sensitivity.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Lab and Reporting (3h)
- Escalating roles and access for a critical user scenario.
- Tracing operations (buy/sell) and collecting evidence (SM20/SCU3).
- Documenting findings with screenshots and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Conclusion and Action Plan (1h)
- Internal control checklist specific to S/4.
- Prioritizing audit findings and formulating recommendations.
Course Materials:
- A checklist containing over 20 controls (FI/MM/SD/BP).
- A quick-reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Prior exposure to SAP systems
- Awareness of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
