Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Key differences from ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current AIS locations: transactions and their Fiori equivalents.
Module 2 – Access, roles, and essential SoD (2h)
- User management tools: PFCG, SUIM, SU53, SU24 (authorization checks by transaction code).
- Fiori catalog and role management (app-id, catalog, space).
- Fundamental SoD matrix and common audit findings (e.g., conflicting creation and release privileges in a single role).
Session 2 (4h)
Module 3 – Security logs and traces (3h)
- Security Audit Log (SM19/SM20): setup, filtering, and interpretation.
- STAD/ST03N: analyzing usage statistics, sessions, and peak periods.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for retaining and exporting audit evidence.
Module 4 – Configuration changes and sensitive data (1h)
- Monitoring changes via SCU3 (change documents) and SCC4 (change policies).
- Reviewing critical parameters using RZ10/RZ11: interpretation and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerance keys, period open/close (OB52), entry segregation, and journal approval workflows.
- MM: Release strategies, limit checks, single supplier scenarios, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls for creation/exchange processes, including fiscal and banking sensitivity.
- Techniques for risk-based sampling and selection.
Session 4 (4h)
Module 6 – Comprehensive laboratory + reporting (3h)
- Simulation of elevated roles and access for a critical user.
- Tracing transactions (purchase/sale) and gathering evidence (SM20/SCU3).
- Documenting findings using screenshots and exported data.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and action plan (1h)
- Internal control checklist specific to S/4.
- Prioritizing audit findings and formulating recommendations.
Deliverables:
- A checklist containing 20+ controls for FI/MM/SD/BP.
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience with SAP systems
- Familiarity with compliance frameworks and control structures
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
