Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Foundational architecture, including the ABAP stack, SAP GUI, and client concept.
  • Key distinctions from legacy systems, highlighting modular design (FI, MM, SD).
  • Classic transactions and navigation techniques tailored for audit purposes.

Access, Roles, and Essential SoD

  • User management and authorizations via PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and common functions relevant to audits.
  • Basics of SoD matrices and typical findings, such as invoice creation and approval within the same role.

Security Logs and Traces

  • Security Audit Log (SM19/SM20): covering activation, filtering, and reporting.
  • STAD and ST03N: analyzing usage statistics, sessions, and workload.
  • Best practices for evidence retention and data export.

Configuration Changes and Sensitive Data

  • Utilizing SCU3 (change documents) and SCC4 (client settings).
  • Identifying and monitoring critical system parameters (RZ10/RZ11).

Process Controls (FI/MM/SD) in R/3

  • FI: Tolerances, OB52 (posting periods), and journal entry approvals.
  • MM: Release strategies, purchase order limits, and single supplier controls.
  • SD: Credit limits, pricing modifications, and condition monitoring.
  • Audit sampling techniques for effective process testing.

Comprehensive Laboratory + Reporting

  • Reviewing roles and authorizations for critical users.
  • Tracing operations (purchase/sale) and gathering audit evidence (SM20/SCU3).
  • Documenting findings with screenshots and exports.
  • Preparing working papers and ensuring traceability.

Closure and Action Plan

  • Internal control checklists specific to R/3.
  • Prioritizing findings and formulating recommendations.

Deliverables

  • A checklist of 20+ controls for FI/MM/SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A solid grasp of fundamental auditing principles.
  • Practical experience working with SAP systems.
  • Familiarity with compliance and control frameworks.

Audience

  • Auditors.
  • Internal control specialists.
  • SAP security consultants.
  • Compliance officers.

Number of participants


Price per participant

Testimonials (2)

Provisional Upcoming Courses (Require 5+ participants)

Related Categories