Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture concepts (ABAP stack, SAP GUI, client structure).
- Key distinctions from legacy systems, including modular design (FI, MM, SD).
- Standard transactions and navigation methods relevant to auditing.
Access, Roles, and Core SoD
- User management and authorization processes using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and common audit-critical functions.
- Basic SoD matrices and typical findings (e.g., combining invoice creation and approval in a single role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): configuration, filtering, and reporting techniques.
- STAD and ST03N: analyzing usage statistics, sessions, and workload patterns.
- Best practices for evidence retention and data export.
Configuration Changes and Sensitive Data
- Monitoring change documents (SCU3) and client settings (SCC4).
- Identifying and monitoring critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
- MM: Release strategies, purchase order limits, and single-supplier controls.
- SD: Credit limits, pricing adjustments, and condition monitoring.
- Techniques for audit sampling in process testing.
Comprehensive Laboratory + Reporting
- Reviewing roles and authorizations for high-risk users.
- Tracing operational activities (purchase/sale) to gather audit evidence (SM20/SCU3).
- Documenting findings using screenshots and data exports.
- Preparing working papers and ensuring traceability.
Closure and Action Plan
- Internal control checklists specific to R/3.
- Prioritizing findings and developing recommendations.
Deliverables
- A checklist containing 20+ controls across FI/MM/SD.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A foundational understanding of auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and internal control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical
