Get in Touch

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture (ABAP stack, SAP GUI, client concept).
  • Key distinctions from legacy systems (modular design: FI, MM, SD).
  • Standard transactions and navigation techniques for audit purposes.

Access, Roles, and Core SoD

  • User management and authorization profiles via PFCG, SU01, SUIM, SU53, SU24.
  • Role design patterns and common audit-relevant functions.
  • Basic SoD matrices and typical findings (e.g., invoice creation and approval within a single role).

Security Logs and Traces

  • Security Audit Log (SM19/SM20): activation, filtering, and reporting.
  • STAD and ST03N: usage statistics, session tracking, and workload analysis.
  • Best practices for evidence retention and data export.

Configuration Changes and Sensitive Data

  • SCU3 (change documents) and SCC4 (client settings).
  • Critical system parameters (RZ10/RZ11): identification and continuous monitoring.

Process Controls (FI/MM/SD) in R/3

  • FI: Tolerance limits, OB52 (posting periods), journal entry approval workflows.
  • MM: Release strategies, purchase order limits, and single-supplier controls.
  • SD: Credit limits, pricing adjustments, and condition monitoring.
  • Audit sampling techniques for process validation.

Comprehensive Laboratory + Reporting

  • Assess roles and authorizations for critical users.
  • Trace operations (purchase/sale) and gather audit evidence (SM20/SCU3).
  • Document findings using screenshots and data exports.
  • Prepare working papers and ensure full traceability.

Wrap-Up and Action Plan

  • Internal control checklist specific to R/3.
  • Prioritization of findings and strategic recommendations.

Deliverables

  • Comprehensive checklist of 20+ controls (FI/MM/SD).
  • Rapid reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.

Requirements

  • Foundational knowledge of auditing principles
  • Practical experience with SAP systems
  • Acquaintance with compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers
 16 Hours

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories