Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
R/3 Fundamentals for Auditors
- Foundational architecture, including the ABAP stack, SAP GUI, and the client concept.
- Key distinctions from legacy systems, particularly the modular design of FI, MM, and SD.
- Standard transactions and navigation techniques relevant to audit tasks.
Access Management, Roles, and Core SoD
- User administration and authorization management via PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions most pertinent to auditing.
- The basic SoD matrix and common audit observations, such as combining invoice creation and approval in a single role.
Security Logging and Tracing
- Security Audit Log (SM19/SM20): enabling, filtering, and report generation.
- STAD and ST03N: analyzing usage statistics, sessions, and system workload.
- Best practices for retaining and exporting audit evidence.
Configuration Modifications and Sensitive Data
- Reviewing change documents (SCU3) and client settings (SCC4).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Tolerance limits, posting periods (OB52), and journal entry approval workflows.
- MM: Release strategies, purchase order thresholds, and single-supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Sampling methodologies for effective process testing.
Comprehensive Laboratory and Reporting
- Auditing the roles and authorizations of critical users.
- Tracing operational activities (purchasing/sales) to secure audit evidence (SM20/SCU3).
- Documenting findings using screenshots and data exports.
- Developing working papers and ensuring full traceability.
Conclusion and Action Planning
- Applying an internal control checklist specific to R/3.
- Prioritizing audit findings and formulating recommendations.
Course Deliverables
- A checklist covering 20+ controls across FI/MM/SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Practical experience working with SAP systems
- Knowledge of standard compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
