Get in Touch
 Duration 16 hours

Course Outline

R/3 Essentials for Auditors

  • Core architecture, including the ABAP stack, SAP GUI, and the client concept.
  • Distinct features compared to legacy systems, particularly the modular design (FI, MM, SD).
  • Navigating classic transactions for effective auditing.

Access Management, Roles, and Key SoD

  • Managing user access and authorizations using PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions critical to audits.
  • Basic SoD matrices and common findings, such as combining invoice creation and approval within a single role.

Security Logs and Tracing

  • The Security Audit Log (SM19/SM20): enabling, filtering, and generating reports.
  • Utilizing STAD and ST03N for usage statistics, session tracking, and workload analysis.
  • Best practices for retaining and exporting audit evidence.

Configuration Adjustments and Sensitive Data

  • Reviewing change documents via SCU3 and client settings through SCC4.
  • Identifying and monitoring critical system parameters (RZ10/RZ11).

Process Controls in R/3 (FI/MM/SD)

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Release strategies, purchase order limits, and single-supplier controls.
  • SD: Credit limits, pricing adjustments, and condition monitoring.
  • Applying audit sampling techniques for process validation.

Comprehensive Lab and Reporting

  • Reviewing the roles and authorizations of a high-risk user.
  • Tracing transactions (purchases/sales) and gathering evidence (SM20/SCU3).
  • Recording findings with screenshots and data exports.
  • Creating working papers and establishing traceability.

Closure and Action Planning

  • An internal control checklist tailored for R/3.
  • Prioritizing findings and formulating recommendations.

Deliverables

  • A checklist containing over 20 controls (FI/MM/SD).
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A solid grasp of fundamental auditing principles
  • Prior experience navigating SAP systems
  • Knowledge of compliance standards and control frameworks

Target Audience

  • Auditors
  • Internal control experts
  • SAP security consultants
  • Compliance professionals

Custom Corporate Training

Training solutions designed exclusively for businesses.

  • Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
  • Flexible Schedule: Dates and times adapted to your team's agenda.
  • Format: Online (live), In-company (at your offices), or Hybrid.
Investment

Price per private group, online live training, starting from 3900 € + VAT*

Contact us for an exact quote and to hear our latest promotions

Testimonials (2)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories