Get in Touch

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture components, including the ABAP stack, SAP GUI, and the client concept.
  • Distinct modular design features (FI, MM, SD) that differentiate R/3 from legacy systems.
  • Navigation methods and standard transactions utilized for auditing purposes.

Access, Roles, and Critical SoD

  • Managing user access and authorizations via PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions most relevant to audit processes.
  • Fundamental SoD matrices and common issues, such as a single role handling both invoice creation and approval.

Security Logs and Tracing

  • Managing the Security Audit Log (SM19/SM20), including activation, filtering, and report generation.
  • Analyzing usage statistics, session data, and workloads using STAD and ST03N.
  • Best practices for retaining and exporting audit evidence.

Configuration Changes and Sensitive Data

  • Tracking changes via SCU3 (change documents) and monitoring client settings in SCC4.
  • Identifying and overseeing critical system parameters through RZ10/RZ11.

Process Controls (FI/MM/SD) in R/3

  • FI: Managing tolerances, posting periods (OB52), and journal entry approval workflows.
  • MM: Configuring release strategies, purchase order limits, and single-supplier controls.
  • SD: Monitoring credit limits, pricing adjustments, and conditions.
  • Techniques for sampling processes during audit testing.

Comprehensive Laboratory + Reporting

  • Auditing the roles and authorizations of a critical user profile.
  • Tracing transactions (purchasing and sales) to gather evidence using SM20/SCU3.
  • Recording findings supported by screenshots and data exports.
  • Drafting working papers and establishing traceability.

Closure and Action Plan

  • Implementing an internal control checklist specific to R/3.
  • Prioritizing audit findings and formulating actionable recommendations.

Deliverables

  • A checklist comprising over 20 controls for FI/MM/SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.

Requirements

  • Familiarity with fundamental auditing principles
  • Practical experience working with SAP systems
  • Knowledge of compliance and internal control frameworks

Target Audience

  • Auditors
  • Specialists in internal controls
  • SAP security consultants
  • Compliance officers
 16 Hours

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories