Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture (ABAP stack, SAP GUI, client concept).
- Key distinctions from legacy systems (modular design: FI, MM, SD).
- Classic transactions and navigation techniques for auditing purposes.
Access, Roles, and Essential SoD
- User management and authorisations using PFCG, SU01, SUIM, SU53, SU24.
- Role design and common audit-relevant functions.
- Basic SoD matrix and typical findings (e.g., invoice creation and approval assigned to the same role).
Security Logs and Traces
- Security Audit Log (SM19/SM20): activation, filtering, and reporting.
- STAD and ST03N: usage statistics, sessions, and workload analysis.
- Best practices for evidence retention and export.
Configuration Changes and Sensitive Data
- SCU3 (change documents) and SCC4 (client settings).
- Critical system parameters (RZ10/RZ11): identification and monitoring.
Process Controls (FI/MM/SD) in R/3
- FI: tolerances, OB52 (posting periods), journal entry approvals.
- MM: release strategies, purchase order limits, single supplier controls.
- SD: credit limits, pricing changes, conditions monitoring.
- Audit sampling techniques for process testing.
Comprehensive Laboratory + Reporting
- Reviewing roles and authorisations for a critical user.
- Tracing operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
- Documenting findings with screenshots and exports.
- Preparation of working papers and ensuring traceability.
Closure and Action Plan
- Internal control checklist for R/3.
- Prioritisation of findings and recommendations.
Deliverables
- A checklist of 20+ controls (FI/MM/SD).
- A quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A foundational understanding of basic auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and control frameworks
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical
