Get in Touch
 Duration 16 hours

Course Outline

R/3 Essentials for Auditors

  • Core architecture components, including the ABAP stack, SAP GUI, and the client concept.
  • Distinguishing features from legacy systems, such as modular design covering FI, MM, and SD.
  • Standard transactions and navigation techniques tailored for audit tasks.

Access Management, Roles, and Core SoD

  • User administration and authorization management using tools like PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions relevant to auditing.
  • Basic SoD matrices and common risk areas, such as combining invoice creation and approval within a single role.

Security Logs and System Traces

  • Utilizing the Security Audit Log (SM19/SM20) for activation, filtering, and reporting.
  • Analyzing usage statistics, sessions, and workload via STAD and ST03N.
  • Best practices for retaining and exporting audit evidence.

Configuration Changes and Sensitive Data

  • Monitoring change documents with SCU3 and reviewing client settings in SCC4.
  • Identifying and tracking critical system parameters using RZ10/RZ11.

Process Controls in R/3 (FI/MM/SD)

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Implementing release strategies, purchase order limits, and single supplier controls.
  • SD: Monitoring credit limits, pricing adjustments, and conditions.
  • Applying audit sampling methods for effective process testing.

Comprehensive Lab and Reporting

  • Reviewing roles and authorizations for high-risk users.
  • Tracing business operations (purchase/sale) and gathering evidence via SM20 and SCU3.
  • Recording findings using screenshots and data exports.
  • Preparing working papers and ensuring full traceability.

Wrap-up and Action Plan

  • Utilizing an internal control checklist specific to R/3.
  • Prioritizing audit findings and developing recommendations.

Deliverables

  • A comprehensive checklist containing over 20 controls for FI, MM, and SD.
  • A quick reference guide for key tools including SM19/SM20, SUIM, SCU3, STAD, and ST03N.

Requirements

  • A foundational understanding of core auditing principles
  • Prior experience working with SAP systems
  • Knowledge of compliance standards and internal control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories