Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
R/3 Fundamentals for Auditors
- Core architecture overview, including the ABAP stack, SAP GUI, and client-based concepts.
- Distinctions from legacy systems, focusing on modular designs such as FI, MM, and SD.
- Standard transactions and navigation procedures relevant to audit engagements.
Access, Roles, and Essential Segregation of Duties (SoD)
- User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
- Role architecture and functions with significant audit implications.
- Foundational SoD matrices and common discrepancies, such as combining invoice creation and approval within a single role.
Security Logs and Traces
- Security Audit Logs (SM19/SM20): activation protocols, filtering criteria, and reporting standards.
- STAD and ST03N: analysis of usage statistics, session details, and system workload.
- Best practices for maintaining audit evidence and data export integrity.
Configuration Changes and Sensitive Data
- Change documentation (SCU3) and client parameter settings (SCC4).
- Identification and monitoring of critical system parameters via RZ10/RZ11.
Process Controls (FI/MM/SD) in R/3
- FI: tolerance limits, posting periods (OB52), and journal entry approval workflows.
- MM: release strategies, purchase order thresholds, and vendor management controls.
- SD: credit limit enforcement, pricing adjustments, and condition monitoring.
- Sampling methodologies for testing process effectiveness.
Comprehensive Laboratory + Reporting
- Assessment of roles and authorizations for high-risk user profiles.
- Tracing transactional activities (procurement/sales) and securing audit evidence via SM20/SCU3.
- Documentation of findings through screenshots and system exports.
- Compilation of working papers and ensuring traceability of audit steps.
Closure and Action Plan
- Internal control verification checklist specific to R/3 environments.
- Ranking of identified issues and formulation of remedial recommendations.
Deliverables
- A comprehensive checklist of over 20 controls spanning FI, MM, and SD.
- Reference guides for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Operational experience with SAP systems
- Working familiarity with compliance and control frameworks
Target Audience
- Internal and external auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
In question and answer section, we can ask many cases and Mr. Oki is great to make us understand the solution of our issues.
Verified Client
Course - Mastering On-Premise SAP Fiori Development
It was straight to the point and more practical