Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Essentials for Auditors
- Foundational architecture (ABAP stack, SAP GUI, client concept).
- Distinctions from legacy systems (modular design: FI, MM, SD).
- Standard transactions and navigation techniques for audit tasks.
Access, Roles, and Fundamental SoD
- User management and authorization via PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and key audit-relevant functions.
- Basic SoD matrix and common issues (e.g., a single role containing both invoice creation and approval).
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting mechanisms.
- STAD and ST03N: Analyzing usage statistics, sessions, and workload.
- Best practices for retaining and exporting evidence.
Configuration Changes and Sensitive Data
- Change documents (SCU3) and client settings (SCC4).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Tolerances, posting periods (OB52), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single-supplier controls.
- SD: Credit limits, pricing modifications, and condition monitoring.
- Audit sampling techniques for testing processes.
Comprehensive Laboratory and Reporting
- Reviewing roles and authorizations for high-risk users.
- Tracing operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
- Documenting findings with screenshots and data exports.
- Drafting working papers and ensuring traceability.
Closure and Action Planning
- Internal control checklist specific to R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- A checklist covering 20+ controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid understanding of basic auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…