Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture concepts, including the ABAP stack, SAP GUI, and the client concept.
- Key distinctions from legacy systems, focusing on modular design in FI, MM, and SD.
- Navigation techniques and classic transactions specific to audit procedures.
Access, Roles, and Essential SoD
- User management and authorization analysis using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and common functions relevant to auditing.
- Constructing basic SoD matrices and identifying typical findings, such as invoice creation and approval within a single role.
Security Logs and Traces
- Managing the Security Audit Log (SM19/SM20), including activation, filtering, and report generation.
- Utilizing STAD and ST03N for usage statistics, session tracking, and workload analysis.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Reviewing change documents via SCU3 and client settings via SCC4.
- Identifying and monitoring critical system parameters using RZ10 and RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: Configuring tolerances, managing posting periods (OB52), and overseeing journal entry approvals.
- MM: Implementing release strategies, enforcing purchase order limits, and applying single supplier controls.
- SD: Monitoring credit limits, pricing adjustments, and condition tables.
- Applying audit sampling techniques for effective process testing.
Comprehensive Laboratory and Reporting
- Conducting a detailed review of roles and authorizations for critical users.
- Tracing operations such as purchases and sales to gather audit evidence using SM20 and SCU3.
- Recording findings with supporting screenshots and data exports.
- Developing working papers and ensuring full traceability.
Closure and Action Plan
- Reviewing the internal control checklist specific to R/3.
- Prioritizing audit findings and formulating actionable recommendations.
Deliverables
- A checklist containing over 20 controls for FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience working with SAP systems
- Working familiarity with compliance and internal control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
