Course Outline
Session 1 (4 hours)
Module 1 – S/4HANA Foundations for Government Auditors (2 hours)
- Core system architecture, including ABAP, Fiori, and catalog/role structures.
-
Distinct differences from ECC:
- Business Partner framework.
- Universal Journal (ACDOCA).
- Adaptive workflow capabilities.
- Identification of Audit Information Sources (AIS) in the current environment: transaction codes and Fiori equivalents.
Module 2 – Access Management, Roles, and Fundamental Segregation of Duties (2 hours)
- User administration tools: PFCG, SUIM, SU53, and SU24 (authorization analysis by transaction code).
- Fiori catalog and role configuration (application ID, catalog, and space assignments).
- Fundamental Segregation of Duties (SoD) matrix and common audit findings (e.g., conflicts in role creation and release permissions).
Session 2 (4 hours)
Module 3 – Security Logs and Trace Analysis (3 hours)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation of records.
- STAD/ST03N: review of usage statistics, session tracking, and peak activity analysis.
- Read Access Logging (RAL): conceptual overview and application scenarios.
- Best practices for retaining and exporting evidence for government audit purposes.
Module 4 – Configuration Changes and Sensitive Data Management (1 hour)
- Monitoring change documents via SCU3 and establishing change policies with SCC4.
- Review of critical parameters (RZ10/RZ11): interpretation and evidentiary standards.
Session 3 (4 hours)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4 hours)
- FI: Tolerance limits, OB52 (accounting periods), entry segregation, and journal approval workflows.
- MM: Release strategies, purchasing limits, single-source procurement, and condition adjustments.
- SD: Credit limit enforcement (FSCM Credit Management) and price/condition modifications.
- BP: Controls for creation/exchange and management of fiscal/banking sensitive data.
- Risk-based sampling and selection methodologies.
Session 4 (4 hours)
Module 6 – Comprehensive Laboratory Exercises and Reporting (3 hours)
- Simulated elevation of roles and access privileges for a critical user profile.
- Tracking operational activities (purchase/sale) and securing evidence via SM20/SCU3.
- Documenting audit findings with captured data and exports.
- Preparation of working papers and ensuring traceability for government reporting.
Module 7 – Closure and Corrective Action Planning (1 hour)
- Internal control checklist specific to S/4HANA.
- Prioritization of audit findings and formulation of recommendations.
Deliverables:
- Comprehensive checklist of 20+ controls covering FI/MM/SD/BP.
- Quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Prior experience with SAP systems
- Familiarity with compliance and internal control frameworks
Target Audience
- Government auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
In question and answer section, we can ask many cases and Mr. Oki is great to make us understand the solution of our issues.
Verified Client
Course - Mastering On-Premise SAP Fiori Development
It was straight to the point and more practical
