Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture components (ABAP stack, SAP GUI, and the client concept).
- Key distinctions from legacy systems, including modular design for FI, MM, and SD.
- Classic transaction codes and navigation techniques specific to audit purposes.
Access Management, Roles, and Core SoD
- User management and authorization setup using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions frequently relevant to audits.
- Basic SoD matrix analysis and identification of typical findings (e.g., conflicting invoice creation and approval rights within a single role).
Security Logs and System Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting capabilities.
- STAD and ST03N: analysis of usage statistics, user sessions, and system workload.
- Best practices for retaining and exporting audit evidence.
Configuration Changes and Sensitive Data
- Reviewing change documents (SCU3) and client settings (SCC4).
- Identification and monitoring of critical system parameters via RZ10/RZ11.
Process Controls in R/3 (FI/MM/SD)
- FI: Tolerance limits, posting periods (OB52), and journal entry approval workflows.
- MM: Release strategies, purchase order limits, and controls for single suppliers.
- SD: Credit limits, pricing modifications, and conditions monitoring.
- Techniques for audit sampling to test process effectiveness.
Comprehensive Laboratory and Reporting
- Reviewing roles and authorizations for critical user accounts.
- Tracing operational activities (purchasing/sales) and gathering evidence via SM20/SCU3.
- Documenting findings with supporting screenshots and data exports.
- Preparation of working papers and ensuring full traceability.
Closure and Action Planning
- Utilizing an internal control checklist specific to R/3.
- Prioritizing findings and developing actionable recommendations.
Deliverables
- A checklist containing over 20 controls covering FI, MM, and SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD, and ST03N.
Requirements
- A foundational understanding of basic auditing principles
- Practical experience with SAP systems
- Knowledge of compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical
