Get in Touch
 Duration 16 hours

Course Outline

R/3 Foundations for Auditors

  • Core architecture, including the ABAP stack, SAP GUI, and the client concept.
  • Distinguishing features compared to legacy systems, focusing on modular design (FI, MM, SD).
  • Standard transactions and navigation techniques optimized for audit workflows.

Access Management, Roles, and Core SoD

  • User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
  • Strategic role design and identifying key audit-relevant functions.
  • Foundational SoD matrices and common discrepancies, such as conflicting invoice creation and approval rights.

Security Logs and System Traces

  • Managing the Security Audit Log (SM19/SM20): activation, filtering, and report generation.
  • Utilizing STAD and ST03N for usage statistics, session analysis, and workload monitoring.
  • Best practices for preserving and exporting audit evidence.

Configuration Management and Sensitive Data

  • Monitoring change documents (SCU3) and client settings (SCC4).
  • Identifying and overseeing critical system parameters via RZ10/RZ11.

Process Controls in R/3 (FI/MM/SD)

  • FI: Configuring tolerances, posting periods (OB52), and journal entry approval workflows.
  • MM: Implementing release strategies, purchase order limits, and single-supplier controls.
  • SD: Managing credit limits, pricing modifications, and condition monitoring.
  • Techniques for effective audit sampling in process testing.

Comprehensive Lab and Reporting

  • Conducting a thorough review of roles and authorizations for high-risk users.
  • Tracing transactional operations (purchase/sale) and gathering audit evidence via SM20/SCU3.
  • Documenting findings with supporting screenshots and data exports.
  • Creating detailed working papers and ensuring full traceability.

Conclusion and Action Planning

  • Applying an internal control checklist within the R/3 environment.
  • Prioritizing audit findings and formulating actionable recommendations.

Key Deliverables

  • A comprehensive checklist containing over 20 controls for FI, MM, and SD modules.
  • A concise guide to navigating SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A solid grasp of fundamental auditing principles
  • Hands-on experience with SAP environments
  • Knowledge of established compliance and internal control frameworks

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories