Get in Touch
 Duration 16 hours

Course Outline

R/3 Essentials for Auditors

  • Core architecture components (ABAP stack, SAP GUI, and the client concept).
  • Distinguishing features compared to legacy systems, particularly its modular design (FI, MM, SD).
  • Navigation and classic transactions specifically applicable to audit procedures.

Access Control, Roles, and Core SoD

  • Managing user authorizations using tools such as PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions critical to audit processes.
  • Basics of the SoD matrix and common findings, such as combining invoice creation and approval within a single role.

Analyzing Security Logs and Traces

  • Security Audit Log (SM19/SM20): covering activation, filtering strategies, and reporting.
  • Leveraging STAD and ST03N for usage statistics, session analysis, and workload monitoring.
  • Best practices for retaining and exporting evidence.

Configuration Management and Sensitive Data

  • Tracking changes via SCU3 (change documents) and managing client settings through SCC4.
  • Identifying and monitoring critical system parameters using RZ10/RZ11.

Process Controls within R/3 (FI/MM/SD)

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Release strategies, purchase order limits, and controls for single-supplier scenarios.
  • SD: Credit limit management, pricing alterations, and condition monitoring.
  • Applying audit sampling techniques for effective process testing.

Integrated Laboratory and Reporting

  • Auditing roles and authorizations for high-risk users.
  • Tracing transactions (purchases/sales) to secure audit evidence via SM20/SCU3.
  • Recording findings with supporting screenshots and data exports.
  • Preparing working papers and ensuring traceability of procedures.

Conclusion and Action Plan

  • Applying an internal control checklist specific to R/3.
  • Prioritizing audit findings and formulating recommendations.

Provided Materials

  • A comprehensive checklist containing over 20 controls for FI/MM/SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.

Requirements

  • Proficiency in fundamental auditing principles.
  • Practical experience working with SAP systems.
  • Knowledge of compliance standards and control frameworks.

Intended Participants

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers

Custom Corporate Training

Training solutions designed exclusively for businesses.

  • Customized Content: We adapt the syllabus and practical exercises to the real goals and needs of your project.
  • Flexible Schedule: Dates and times adapted to your team's agenda.
  • Format: Online (live), In-company (at your offices), or Hybrid.
Investment

Price per private group, online live training, starting from 4800 € + VAT*

Contact us for an exact quote and to hear our latest promotions

Testimonials (2)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories