Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Key differences compared to ECC:
- Business Partner.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current location of AIS: transactions and their Fiori equivalents.
Module 2 – Access, Roles, and Essential SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorizations by T-Code).
- Fiori catalogs and roles (app-id, catalog, space).
- Fundamental SoD matrix and common findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and analysis.
- STAD/ST03N: analyzing usage statistics, sessions, and peak loads.
- Read Access Logging (RAL): concepts and appropriate use cases.
- Best practices for retaining and exporting evidence.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents) and SCC4 (change policy).
- Critical parameters (RZ10/RZ11): interpretation and evidentiary value.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (periods), entry segregation, and journal approval (workflow).
- MM: Release strategies, limits, single supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls on creation/exchange, including fiscal/banking sensitivity.
- Risk-based sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive Laboratory and Reporting (3h)
- Escalate roles and access rights for a critical user.
- Trace operations (buy/sell) and collect evidence (SM20/SCU3).
- Document findings using captures and exports.
- Prepare working papers and ensure traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklist for S/4.
- Prioritizing findings and drafting recommendations.
Deliverables:
- A checklist containing 20+ controls (FI/MM/SD/BP).
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles
- Practical experience with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Custom Corporate Training
Training solutions designed exclusively for businesses.
- Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
- Flexible Schedule: Dates and times adapted to your team's agenda.
- Format: Online (live), In-company (at your offices), or Hybrid.
Price per private group, online live training, starting from 4800 € + VAT*
Contact us for an exact quote and to hear our latest promotions
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
His calm and collected voice even though at points he was frustrated with the system, but kept his cool…
