Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture components (ABAP stack, SAP GUI, and the client concept).
  • Key distinctions from legacy systems, particularly regarding modular design (FI, MM, SD).
  • Standard transactions and navigation techniques applied for audit purposes.

Access, Roles, and Core SoD

  • User management and authorization strategies using PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions commonly relevant to audits.
  • Basic SoD matrix analysis and typical findings (e.g., roles combining invoice creation and approval).

Security Logs and Traces

  • Security Audit Log (SM19/SM20): enabling, filtering, and generating reports.
  • STAD and ST03N: analyzing usage statistics, sessions, and workload distribution.
  • Best practices for retaining and exporting evidence.

Configuration Modifications and Sensitive Data

  • Monitoring SCU3 (change documents) and SCC4 (client settings).
  • Identifying and tracking critical system parameters (RZ10/RZ11).

Process Controls (FI/MM/SD) in R/3

  • FI: tolerances, OB52 (posting periods), and journal entry approvals.
  • MM: release strategies, purchase order limits, and single-supplier controls.
  • SD: credit limits, pricing adjustments, and condition monitoring.
  • Sampling techniques for process testing in audits.

Comprehensive Laboratory + Reporting

  • Assessing roles and authorizations for critical users.
  • Tracking operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
  • Recording findings with screenshots and data exports.
  • Drafting working papers and ensuring traceability.

Closure and Action Plan

  • An internal control checklist tailored for R/3.
  • Prioritizing findings and formulating recommendations.

Deliverables

  • A checklist covering 20+ controls (FI/MM/SD).
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A grasp of fundamental auditing principles
  • Hands-on experience with SAP systems
  • Knowledge of compliance and control frameworks

Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories