Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture (ABAP, Fiori, catalogs/roles).
-
Key Differences from ECC:
- Business Partner functionality.
- Universal Journal (ACDOCA).
- Flexible Workflows.
- Current locations for AIS data: transaction codes and Fiori equivalents.
Module 2 – Access, Roles, and Essential SoD (2h)
- User management, PFCG, SUIM, SU53, SU24 (authorizations via tcode).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrices and common findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and analysis.
- STAD/ST03N: analyzing usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for evidence retention and data export.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents) and SCC4 (change policies).
- Critical parameters (RZ10/RZ11): interpretation and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (posting periods), entry segregation, and journal approvals via workflow.
- MM: Release strategies, limit settings, single-source purchasing, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls on creation/modification and fiscal/banking data sensitivity.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Lab + Reporting (3h)
- Elevating roles and access for critical users.
- Tracing operations (buy/sell) and capturing evidence (SM20/SCU3).
- Documenting findings with screenshots and data exports.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklists specific to S/4.
- Prioritizing findings and formulating recommendations.
Course Deliverables:
- A checklist of 20+ controls (FI/MM/SD/BP).
- Quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Fundamental knowledge of auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and internal control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
