Đề cương khóa học
Session 1 (4h)
Module 1 – R/3 Fundamentals for Auditors (2h)
- Basic architecture (ABAP stack, SAP GUI, client concept).
- Key differences from legacy systems (modular design: FI, MM, SD).
- Classic transactions and navigation for audit purposes.
Module 2 – Access, Roles, and Essential SoD (2h)
- User management and authorizations with PFCG, SU01, SUIM, SU53, SU24.
- Role design and common audit-relevant functions.
- Basic SoD matrix and typical findings (e.g., invoice creation and approval in the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filters, and reporting.
- STAD and ST03N: usage statistics, sessions, and workload analysis.
- Good practices for evidence retention and export.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents) and SCC4 (client settings).
- Critical system parameters (RZ10/RZ11): identification and monitoring.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in R/3 (4h)
- FI: tolerances, OB52 (posting periods), journal entry approvals.
- MM: release strategies, purchase order limits, single supplier controls.
- SD: credit limits, pricing changes, conditions monitoring.
- Audit sampling techniques for process testing.
Session 4 (4h)
Module 6 – Comprehensive Laboratory + Reporting (3h)
- Review roles and authorizations for a critical user.
- Trace operations (purchase/sale) and obtain audit evidence (SM20/SCU3).
- Document findings with screenshots and exports.
- Preparation of working papers and traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklist in R/3.
- Prioritization of findings and recommendations.
Deliverables:
- Checklist of 20+ controls (FI/MM/SD).
- Quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.
Summary and Next Steps
Requirements
- An understanding of basic auditing principles
- Experience with SAP systems
- Familiarity with compliance and control frameworks
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Đánh giá (4)
Học viên knowledge (Note: The term "knolage" seems to be a misspelling of "knowledge." Since it's not clear if this is intentional or part of a specific context, I've translated "knowledge" but left the name as is. If "Teacher knolage" is meant to be a proper noun or title, please clarify.) If "knolage" should remain unaltered: Giáo viên knolage
Collin Sampson
Course - SAP S/4HANA Overview (S4H00)
Dịch thuật bằng máy
Tôi thích việc giảng viên rất linh hoạt và cung cấp thông tin về các chủ đề không có trong材料被中途打断,根据指示仅翻译给出的确切文本: 我喜欢培训师非常灵活,并提供了超出初始材料的信息。我喜欢他从其他项目中获得的经验以及由此产生的技巧。 培训是互动的,尽管练习是预定义的,但我们能够将练习导向不同于先前定义的方向。
Maria-Cristina Socol - NTT DATA Romania S.A.
Course - SAP S/4 Hana (S/4Hana)
Dịch thuật bằng máy
Chúng ta đã học được rất nhiều điều mà trước đây chúng ta không biết.
Lebogang Kgosiesele - Lucara Botswana
Course - SAP S/4 HANA PP (Production Planning)
Dịch thuật bằng máy
Ayman là một giảng viên rất giỏi. Anh đã giải đáp mọi thắc mắc của chúng tôi và rất dễ hiểu. Ayman đã trả lời thỏa đáng tất cả các câu hỏi mà chúng tôi đặt ra.
Anna Bytnar - ABB
Course - SAP S/4 HANA SD (Sales and Distribution)
Dịch thuật bằng máy