Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Foundations for Auditors
- Core architecture (ABAP stack, SAP GUI, client concept).
- Distinctions from legacy systems (modular structure: FI, MM, SD).
- Standard transactions and navigation methods for audit purposes.
Access Management, Roles, and Core SoD
- User administration and authorizations using PFCG, SU01, SUIM, SU53, and SU24.
- Role architecture and common functions relevant to auditing.
- Basic SoD matrices and frequent findings (e.g., combining invoice creation and approval within a single role).
Security Logging and Tracing
- Security Audit Log (SM19/SM20): activation, filtering, and report generation.
- STAD and ST03N: analyzing usage statistics, sessions, and workload.
- Best practices for retaining and exporting evidence.
Configuration Modifications and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings).
- Critical system parameters (RZ10/RZ11): identification and monitoring strategies.
Process Controls (FI/MM/SD) in R/3
- FI: Tolerances, OB52 (posting periods), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single-supplier controls.
- SD: Credit limits, pricing modifications, and condition monitoring.
- Sampling methodologies for process testing in audits.
Comprehensive Laboratory and Reporting
- Reviewing roles and authorizations for critical users.
- Tracing operations (purchase/sale) and gathering audit evidence via SM20/SCU3.
- Documenting findings using screenshots and data exports.
- Preparation of working papers and ensuring traceability.
Conclusion and Action Plan
- Internal control checklist specific to R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- A checklist containing over 20 controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Knowledge of fundamental auditing principles
- Practical experience with SAP systems
- Understanding of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical