Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Foundational architecture (ABAP, Fiori, catalogs/roles).
-
Key distinctions compared to ECC:
- Business Partner model.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current landscape for AIS: transactions and their Fiori equivalents.
Module 2 – Access, roles and essential SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorisations by transaction code).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and common audit findings (e.g. creation and release rights within the same role).
Session 2 (4h)
Module 3 – Security logs and traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation.
- STAD/ST03N: analysis of usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): core concepts and appropriate application scenarios.
- Best practices for evidence retention and data export.
Module 4 – Configuration changes and sensitive data (1h)
- SCU3 (change documents) and SCC4 (change policy).
- Critical parameters (RZ10/RZ11): review and evidencing.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (posting periods), segregation in entries, and journal approval (workflow).
- MM: Release strategies, limit settings, single supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition adjustments.
- BP: Controls on creation/exchange, and fiscal/banking data sensitivity.
- Risk-based sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive laboratory + reporting (3h)
- Scenario: Elevation of roles and access for a critical user.
- Tracing operations (buy/sell) and gathering evidence (SM20/SCU3).
- Documenting findings with captures and exports.
- Preparation of working papers and ensuring traceability.
Module 7 – Closure and action plan (1h)
- Internal control checklist specific to S/4.
- Prioritising findings and developing recommendations.
Deliverables:
- A checklist containing 20+ controls (FI/MM/SD/BP).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A foundational understanding of auditing principles
- Prior experience with SAP systems
- Familiarity with compliance and internal control frameworks
Target Audience
- Internal and external auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
