Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture (ABAP, Fiori, catalogs/roles).
-
Key Differences from ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Locating Audit Information System (AIS) elements: transactions and their Fiori equivalents.
Module 2 – Access, Roles, and Essential SoD (2h)
- Users, PFCG, SUIM, SU53, and SU24 (authorizations by transaction code).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and typical findings (e.g., creation and release authority within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and reading.
- STAD/ST03N: usage statistics, sessions, and peak analysis.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for retaining and exporting evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): reading and evidencing.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (periods), entry segregation, and journal approval (workflow).
- MM: Release strategies, limits, single-supplier issues, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition changes.
- BP: Controls on creation/exchange, and fiscal/banking sensitivity.
- Risk-driven sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive Lab + Reporting (3h)
- Creating roles and assigning access for a critical user.
- Tracing operations (purchase/sale) and obtaining evidence (SM20/SCU3).
- Documenting findings with screenshots and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklist for S/4.
- Prioritizing findings and recommendations.
Deliverables:
- Checklist of 20+ controls (FI/MM/SD/BP).
- Quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A foundational understanding of basic auditing principles
- Prior experience working with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
16 Hours
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
