Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Foundations for Auditors
- Core architecture components, including the ABAP stack, SAP GUI, and the client concept.
- Distinctions from legacy systems, specifically regarding modular design (FI, MM, SD).
- Essential transactions and navigation techniques for audit purposes.
Access Management, Roles, and Core SoD
- User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions relevant to audit scrutiny.
- Basic SoD matrices and common findings, such as combining invoice creation and approval within a single role.
Security Logs and Tracing
- Security Audit Log (SM19/SM20): activation, filtering, and report generation.
- STAD and ST03N: analyzing usage statistics, sessions, and workload distribution.
- Best practices for evidence retention and data export.
Configuration Changes and Sensitive Data Handling
- Utilization of SCU3 (change documents) and SCC4 (client settings).
- Identification and monitoring of critical system parameters via RZ10/RZ11.
Process Controls in R/3 (FI/MM/SD)
- FI: Tolerances, OB52 (posting periods), and journal entry approval workflows.
- MM: Release strategies, purchase order limits, and single supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Audit sampling methodologies for effective process testing.
Comprehensive Laboratory and Reporting
- Assessment of roles and authorizations for high-impact users.
- Tracing operations (purchase/sale) and gathering audit evidence via SM20/SCU3.
- Recording findings using screenshots and data exports.
- Compilation of working papers and ensuring traceability.
Conclusion and Action Planning
- Internal control checklists specific to R/3 environments.
- Prioritization of findings and formulation of recommendations.
Deliverables
- A checklist containing over 20 controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A foundational understanding of basic auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical