Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture components (ABAP stack, SAP GUI, and the client concept).
- Key distinctions from legacy systems, particularly regarding modular design (FI, MM, SD).
- Standard transactions and navigation techniques applied for audit purposes.
Access, Roles, and Core SoD
- User management and authorization strategies using PFCG, SU01, SUIM, SU53, and SU24.
- Role design principles and functions commonly relevant to audits.
- Basic SoD matrix analysis and typical findings (e.g., roles combining invoice creation and approval).
Security Logs and Traces
- Security Audit Log (SM19/SM20): enabling, filtering, and generating reports.
- STAD and ST03N: analyzing usage statistics, sessions, and workload distribution.
- Best practices for retaining and exporting evidence.
Configuration Modifications and Sensitive Data
- Monitoring SCU3 (change documents) and SCC4 (client settings).
- Identifying and tracking critical system parameters (RZ10/RZ11).
Process Controls (FI/MM/SD) in R/3
- FI: tolerances, OB52 (posting periods), and journal entry approvals.
- MM: release strategies, purchase order limits, and single-supplier controls.
- SD: credit limits, pricing adjustments, and condition monitoring.
- Sampling techniques for process testing in audits.
Comprehensive Laboratory + Reporting
- Assessing roles and authorizations for critical users.
- Tracking operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
- Recording findings with screenshots and data exports.
- Drafting working papers and ensuring traceability.
Closure and Action Plan
- An internal control checklist tailored for R/3.
- Prioritizing findings and formulating recommendations.
Deliverables
- A checklist covering 20+ controls (FI/MM/SD).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- A grasp of fundamental auditing principles
- Hands-on experience with SAP systems
- Knowledge of compliance and control frameworks
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical