Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Basics for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Significant differences from ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current AIS functionality: transactions and their Fiori counterparts.
Module 2 – Access, Roles, and Core SoD (2h)
- User management, PFCG, SUIM, SU53, and SU24 (authorization checks via t-code).
- Fiori catalogs and role assignments (app-id, catalog, space).
- Fundamental SoD matrix and common risk areas (e.g., creation and release permissions in the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): setup, filtering, and interpretation.
- STAD/ST03N: analyzing usage statistics, sessions, and peak activity.
- Read Access Logging (RAL): underlying concepts and use cases.
- Best practices for retaining and exporting audit evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documentation) and SCC4 (change policies).
- Critical parameters (RZ10/RZ11): review methods and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (accounting periods), input segregation, and journal approvals (workflows).
- MM: Release strategies, spending limits, single source dependencies, and condition changes.
- SD: Credit limits (FSCM Credit Management) and pricing/condition adjustments.
- BP: Controls over creation/exchange, and fiscal/banking data sensitivity.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Integrated Lab Exercise + Reporting (3h)
- Simulating role and access changes for a critical user.
- Tracing operational transactions (buy/sell) and gathering evidence (SM20/SCU3).
- Recording findings with relevant screenshots and exports.
- Drafting working papers and ensuring traceability.
Module 7 – Conclusion and Action Plan (1h)
- Internal control checklist specific to S/4.
- Prioritizing audit findings and formulating recommendations.
Key Deliverables:
- A checklist containing over 20 controls (FI/MM/SD/BP).
- A rapid reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience with SAP environments
- Awareness of compliance standards and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
