Get in Touch

Course Outline

R/3 Essentials for Auditors

  • Foundational architecture (ABAP stack, SAP GUI, client concept).
  • Distinctions from legacy systems (modular design: FI, MM, SD).
  • Standard transactions and navigation techniques for audit tasks.

Access, Roles, and Fundamental SoD

  • User management and authorization via PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and key audit-relevant functions.
  • Basic SoD matrix and common issues (e.g., a single role containing both invoice creation and approval).

Security Logs and Traces

  • Security Audit Log (SM19/SM20): activation, filtering, and reporting mechanisms.
  • STAD and ST03N: Analyzing usage statistics, sessions, and workload.
  • Best practices for retaining and exporting evidence.

Configuration Changes and Sensitive Data

  • Change documents (SCU3) and client settings (SCC4).
  • Identifying and monitoring critical system parameters (RZ10/RZ11).

Process Controls (FI/MM/SD) in R/3

  • FI: Tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Release strategies, purchase order limits, and single-supplier controls.
  • SD: Credit limits, pricing modifications, and condition monitoring.
  • Audit sampling techniques for testing processes.

Comprehensive Laboratory and Reporting

  • Reviewing roles and authorizations for high-risk users.
  • Tracing operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
  • Documenting findings with screenshots and data exports.
  • Drafting working papers and ensuring traceability.

Closure and Action Planning

  • Internal control checklist specific to R/3.
  • Prioritizing findings and formulating recommendations.

Deliverables

  • A checklist covering 20+ controls (FI/MM/SD).
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A solid understanding of basic auditing principles
  • Practical experience with SAP systems
  • Familiarity with compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers
 16 Hours

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories