Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Foundations for Auditors
- Core architecture (ABAP stack, SAP GUI, and client concepts).
- Distinctions from legacy systems, specifically regarding modular design (FI, MM, SD).
- Navigation and classic transactions tailored for audit objectives.
Access Management, Roles, and Fundamental SoD
- User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
- Role architecture and functions relevant to audit procedures.
- Basics of the SoD matrix and common issues, such as conflicting invoice creation and approval rights within a single role.
Security Logging and Tracing
- Security Audit Log (SM19/SM20): configuration, filtering, and report generation.
- STAD and ST03N: analyzing usage statistics, session data, and system workload.
- Best practices for retaining and exporting audit evidence.
Configuration Modifications and Sensitive Data
- SCU3 (change documents) and SCC4 (client configuration settings).
- Identification and monitoring of critical system parameters (RZ10/RZ11).
Process Controls in R/3 (FI/MM/SD)
- FI: tolerance limits, OB52 (posting periods), and journal entry approvals.
- MM: release strategies, purchase order thresholds, and single-supplier restrictions.
- SD: credit limits, pricing modifications, and condition monitoring.
- Sampling methodologies for process validation.
Comprehensive Laboratory and Reporting
- Assessment of roles and authorizations for high-risk users.
- Tracking operations (purchasing/sales) and collecting evidence via SM20/SCU3.
- Documentation of findings, including screenshots and data exports.
- Development of working papers and ensuring traceability.
Conclusion and Action Planning
- Internal control checklists specific to R/3.
- Prioritizing findings and formulating remedial recommendations.
Deliverables
- A checklist containing over 20 controls (covering FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles.
- Practical experience working with SAP systems.
- Working familiarity with compliance standards and control frameworks.
Target Audience
- Auditors.
- Internal control specialists.
- SAP security consultants.
- Compliance officers.
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical