Get in Touch
 Duration 16 hours

Course Outline

R/3 Foundations for Auditors

  • Core architecture components, including the ABAP stack, SAP GUI, and the client concept.
  • Distinctions from legacy systems, specifically regarding modular design (FI, MM, SD).
  • Essential transactions and navigation techniques for audit purposes.

Access Management, Roles, and Core SoD

  • User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions relevant to audit scrutiny.
  • Basic SoD matrices and common findings, such as combining invoice creation and approval within a single role.

Security Logs and Tracing

  • Security Audit Log (SM19/SM20): activation, filtering, and report generation.
  • STAD and ST03N: analyzing usage statistics, sessions, and workload distribution.
  • Best practices for evidence retention and data export.

Configuration Changes and Sensitive Data Handling

  • Utilization of SCU3 (change documents) and SCC4 (client settings).
  • Identification and monitoring of critical system parameters via RZ10/RZ11.

Process Controls in R/3 (FI/MM/SD)

  • FI: Tolerances, OB52 (posting periods), and journal entry approval workflows.
  • MM: Release strategies, purchase order limits, and single supplier controls.
  • SD: Credit limits, pricing adjustments, and condition monitoring.
  • Audit sampling methodologies for effective process testing.

Comprehensive Laboratory and Reporting

  • Assessment of roles and authorizations for high-impact users.
  • Tracing operations (purchase/sale) and gathering audit evidence via SM20/SCU3.
  • Recording findings using screenshots and data exports.
  • Compilation of working papers and ensuring traceability.

Conclusion and Action Planning

  • Internal control checklists specific to R/3 environments.
  • Prioritization of findings and formulation of recommendations.

Deliverables

  • A checklist containing over 20 controls (FI/MM/SD).
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A foundational understanding of basic auditing principles
  • Practical experience with SAP systems
  • Familiarity with compliance and control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant (excl. VAT)

Testimonials (2)

Upcoming Courses

Related Categories