Get in Touch
 Duration 16 hours

Course Outline

R/3 Fundamentals for Auditors

  • Core architecture overview, including the ABAP stack, SAP GUI, and client-based concepts.
  • Distinctions from legacy systems, focusing on modular designs such as FI, MM, and SD.
  • Standard transactions and navigation procedures relevant to audit engagements.

Access, Roles, and Essential Segregation of Duties (SoD)

  • User administration and authorization management using PFCG, SU01, SUIM, SU53, and SU24.
  • Role architecture and functions with significant audit implications.
  • Foundational SoD matrices and common discrepancies, such as combining invoice creation and approval within a single role.

Security Logs and Traces

  • Security Audit Logs (SM19/SM20): activation protocols, filtering criteria, and reporting standards.
  • STAD and ST03N: analysis of usage statistics, session details, and system workload.
  • Best practices for maintaining audit evidence and data export integrity.

Configuration Changes and Sensitive Data

  • Change documentation (SCU3) and client parameter settings (SCC4).
  • Identification and monitoring of critical system parameters via RZ10/RZ11.

Process Controls (FI/MM/SD) in R/3

  • FI: tolerance limits, posting periods (OB52), and journal entry approval workflows.
  • MM: release strategies, purchase order thresholds, and vendor management controls.
  • SD: credit limit enforcement, pricing adjustments, and condition monitoring.
  • Sampling methodologies for testing process effectiveness.

Comprehensive Laboratory + Reporting

  • Assessment of roles and authorizations for high-risk user profiles.
  • Tracing transactional activities (procurement/sales) and securing audit evidence via SM20/SCU3.
  • Documentation of findings through screenshots and system exports.
  • Compilation of working papers and ensuring traceability of audit steps.

Closure and Action Plan

  • Internal control verification checklist specific to R/3 environments.
  • Ranking of identified issues and formulation of remedial recommendations.

Deliverables

  • A comprehensive checklist of over 20 controls spanning FI, MM, and SD.
  • Reference guides for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • Foundational knowledge of auditing principles
  • Operational experience with SAP systems
  • Working familiarity with compliance and control frameworks

Target Audience

  • Internal and external auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories