Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Foundational architecture components, including ABAP, Fiori, and role catalogs.
-
Critical differences compared to ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current locations for Audit Information System (AIS) data: relevant transactions and their Fiori equivalents.
Module 2 – Access Management, Roles, and Core SoD (2h)
- Managing users via PFCG, SUIM, SU53, and SU24, including authorization analysis by transaction code.
- Configuring Fiori catalogs and roles (app-id, catalog, space).
- Establishing a basic SoD matrix and identifying typical findings, such as conflicting creation and release authorities within a single role.
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation.
- STAD/ST03N: Analyzing usage statistics, sessions, and activity peaks.
- Read Access Logging (RAL): Understanding the concept and its application.
- Best practices for retaining and exporting audit evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- Reviewing change documents in SCU3 and change policies in SCC4.
- Examining critical parameters in RZ10/RZ11, including interpretation and evidence gathering.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerance limits, OB52 (periods), entry segregation, and journal approval workflows.
- MM: Release strategies, limit settings, single-supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls on creation and data exchange, with focus on fiscal and banking sensitivity.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Laboratory and Reporting (3h)
- Elevating the roles and access levels of a critical user for testing purposes.
- Tracing buy/sell operations and gathering evidence via SM20 and SCU3.
- Documenting findings using captures and data exports.
- Preparing working papers and ensuring full traceability.
Module 7 – Closure and Action Planning (1h)
- Implementing an internal control checklist specifically for S/4.
- Prioritizing audit findings and formulating actionable recommendations.
Deliverables:
- A comprehensive checklist containing 20+ controls for FI/MM/SD/BP.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A solid foundation in basic auditing principles
- Practical experience with SAP systems
- Familiarity with established compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
