Get in Touch

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture concepts, including the ABAP stack, SAP GUI, and client structure.
  • Key distinctions from legacy systems, highlighting the modular design of FI, MM, and SD.
  • Navigating classic transactions and interfaces for audit purposes.

Access Management, Roles, and Core SoD

  • User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions with high audit relevance.
  • Basic SoD matrices and common findings, such as conflicting duties for invoice creation and approval within the same role.

Security Logs and System Traces

  • Managing the Security Audit Log (SM19/SM20): activation, filtering, and report generation.
  • Leveraging STAD and ST03N for usage statistics, session analysis, and workload monitoring.
  • Best practices for evidence retention and data export.

Configuration Changes and Sensitive Data

  • Utilizing SCU3 (change documents) and SCC4 (client settings) for oversight.
  • Identifying and monitoring critical system parameters via RZ10/RZ11.

Process Controls (FI/MM/SD) in R/3

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Implementing release strategies, purchase order limits, and single-source controls.
  • SD: Monitoring credit limits, pricing adjustments, and condition tables.
  • Applying audit sampling techniques for effective process testing.

Comprehensive Lab and Reporting

  • Auditing the roles and authorizations of a critical user profile.
  • Tracing operational activities (purchases/sales) to secure audit evidence via SM20/SCU3.
  • Documenting findings through screenshots and data exports.
  • Preparing working papers and ensuring full traceability.

Closure and Action Planning

  • Applying an internal control checklist specific to R/3.
  • Prioritizing findings and formulating actionable recommendations.

Deliverables

  • A comprehensive checklist containing over 20 controls for FI/MM/SD.
  • A quick-reference guide for key transactions including SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A solid grasp of fundamental auditing principles.
  • Practical experience with SAP systems.
  • Familiarity with established compliance and control frameworks.

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers
 16 Hours

Custom Corporate Training

Training solutions designed exclusively for businesses.

  • Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
  • Flexible Schedule: Dates and times adapted to your team's agenda.
  • Format: Online (live), In-company (at your offices), or Hybrid.
Investment

Price per private group, online live training, starting from 3900 € + VAT*

Contact us for an exact quote and to hear our latest promotions

Testimonials (2)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories