Get in Touch
 Duration 16 hours

Course Outline

R/3 Foundations for Auditors

  • Core architecture (ABAP stack, SAP GUI, and client concepts).
  • Distinctions from legacy systems, specifically regarding modular design (FI, MM, SD).
  • Navigation and classic transactions tailored for audit objectives.

Access Management, Roles, and Fundamental SoD

  • User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
  • Role architecture and functions relevant to audit procedures.
  • Basics of the SoD matrix and common issues, such as conflicting invoice creation and approval rights within a single role.

Security Logging and Tracing

  • Security Audit Log (SM19/SM20): configuration, filtering, and report generation.
  • STAD and ST03N: analyzing usage statistics, session data, and system workload.
  • Best practices for retaining and exporting audit evidence.

Configuration Modifications and Sensitive Data

  • SCU3 (change documents) and SCC4 (client configuration settings).
  • Identification and monitoring of critical system parameters (RZ10/RZ11).

Process Controls in R/3 (FI/MM/SD)

  • FI: tolerance limits, OB52 (posting periods), and journal entry approvals.
  • MM: release strategies, purchase order thresholds, and single-supplier restrictions.
  • SD: credit limits, pricing modifications, and condition monitoring.
  • Sampling methodologies for process validation.

Comprehensive Laboratory and Reporting

  • Assessment of roles and authorizations for high-risk users.
  • Tracking operations (purchasing/sales) and collecting evidence via SM20/SCU3.
  • Documentation of findings, including screenshots and data exports.
  • Development of working papers and ensuring traceability.

Conclusion and Action Planning

  • Internal control checklists specific to R/3.
  • Prioritizing findings and formulating remedial recommendations.

Deliverables

  • A checklist containing over 20 controls (covering FI/MM/SD).
  • A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.

Requirements

  • Foundational knowledge of auditing principles.
  • Practical experience working with SAP systems.
  • Working familiarity with compliance standards and control frameworks.

Target Audience

  • Auditors.
  • Internal control specialists.
  • SAP security consultants.
  • Compliance officers.

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories