Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture (ABAP stack, SAP GUI, client concept).
- Key distinctions from legacy systems (modular design: FI, MM, SD).
- Standard transactions and navigation techniques for audit purposes.
Access, Roles, and Core SoD
- User management and authorization profiles via PFCG, SU01, SUIM, SU53, SU24.
- Role design patterns and common audit-relevant functions.
- Basic SoD matrices and typical findings (e.g., invoice creation and approval within a single role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting.
- STAD and ST03N: usage statistics, session tracking, and workload analysis.
- Best practices for evidence retention and data export.
Configuration Changes and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings).
- Critical system parameters (RZ10/RZ11): identification and continuous monitoring.
Process Controls (FI/MM/SD) in R/3
- FI: Tolerance limits, OB52 (posting periods), journal entry approval workflows.
- MM: Release strategies, purchase order limits, and single-supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Audit sampling techniques for process validation.
Comprehensive Laboratory + Reporting
- Assess roles and authorizations for critical users.
- Trace operations (purchase/sale) and gather audit evidence (SM20/SCU3).
- Document findings using screenshots and data exports.
- Prepare working papers and ensure full traceability.
Wrap-Up and Action Plan
- Internal control checklist specific to R/3.
- Prioritization of findings and strategic recommendations.
Deliverables
- Comprehensive checklist of 20+ controls (FI/MM/SD).
- Rapid reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience with SAP systems
- Acquaintance with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…