Get in Touch
 Duration 16 hours

Course Outline

R/3 Essentials for Auditing

  • Foundational architecture, including the ABAP stack, SAP GUI, and the client concept.
  • Distinguishing features compared to legacy systems, emphasizing modular design (FI, MM, SD).
  • Utilizing classic transactions and navigation techniques for audit purposes.

Access Management, Roles, and Core SoD

  • Managing user authorizations via PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and key functions relevant to auditing.
  • Developing SoD matrices and identifying common deficiencies, such as combined invoice creation and approval privileges.

Security Logging and System Traces

  • Managing the Security Audit Log (SM19/SM20), including activation, filtering, and reporting.
  • Analyze workload, sessions, and usage statistics using STAD and ST03N.
  • Best practices for retaining and exporting audit evidence.

Configuration Monitoring and Sensitive Data

  • Tracking change documents (SCU3) and reviewing client settings (SCC4).
  • Identifying and monitoring critical system parameters (RZ10/RZ11).

Process Controls (FI/MM/SD) in R/3

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Implementing release strategies, purchase order limits, and single-supplier controls.
  • SD: Monitoring credit limits, pricing adjustments, and condition changes.
  • Applying audit sampling techniques for effective process testing.

Comprehensive Laboratory and Reporting

  • Auditing roles and authorizations for high-risk users.
  • Tracing transactions (purchasing/sales) and securing evidence via SM20/SCU3.
  • Documenting findings using screenshots and data exports.
  • Creating working papers and ensuring full traceability.

Closure and Remediation Planning

  • Utilizing an internal control checklist specific to R/3.
  • Prioritizing findings and formulating actionable recommendations.

Key Deliverables

  • A comprehensive checklist of over 20 controls covering FI, MM, and SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • Foundational knowledge of auditing principles
  • Practical experience with SAP environments
  • Familiarity with relevant compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Testimonials (2)

Upcoming Courses

Related Categories