Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Core architecture (ABAP stack, SAP GUI, client concept).
- Distinctions from legacy systems (modular design: FI, MM, SD).
- Standard transactions and navigation techniques for auditing.
Access, Roles, and Critical SoD
- User management and authorisations using PFCG, SU01, SUIM, SU53, and SU24.
- Role design and functions relevant to audits.
- Basic SoD matrix and typical findings (e.g., invoice creation and approval within a single role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): enabling, filtering, and reporting.
- STAD and ST03N: analysing usage statistics, sessions, and workload.
- Best practices for retaining and exporting evidence.
Configuration Changes and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings).
- Critical system parameters (RZ10/RZ11): identification and monitoring.
Process Controls (FI/MM/SD) in R/3
- FI: tolerance limits, OB52 (posting periods), and journal entry approvals.
- MM: release strategies, purchase order limits, and single-supplier controls.
- SD: credit limits, pricing adjustments, and condition monitoring.
- Audit sampling methods for process testing.
Comprehensive Laboratory + Reporting
- Reviewing roles and authorisations for a critical user.
- Tracing operations (purchase/sale) and collecting audit evidence (SM20/SCU3).
- Documenting findings via screenshots and exports.
- Preparing working papers and ensuring traceability.
Closure and Action Plan
- Internal control checklist for R/3.
- Prioritising findings and recommending actions.
Deliverables
- Checklist containing 20+ controls (FI/MM/SD).
- Quick guide to SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Knowledge of fundamental auditing principles
- Practical experience with SAP systems
- Awareness of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
