Thank you for sending your enquiry! One of our team members will contact you shortly.
Thank you for sending your booking! One of our team members will contact you shortly.
Duration 16 hours
Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
-
Key differences from ECC:
- Business Partner.
- Universal Journal (ACDOCA).
- Flexible Workflows.
- Current AIS locations: transactions and their Fiori equivalents.
Module 2 – Access, Roles, and Essential SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorizations by tcode).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and common findings (e.g., creation and release within the same role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and interpretation.
- STAD/ST03N: usage statistics, sessions, and peak times.
- Read Access Logging (RAL): concepts and application scenarios.
- Best practices for evidence retention and export.
Module 4 – Configuration Changes and Sensitive Data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): review and evidence collection.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, OB52 (periods), entry segregation, and journal approvals (workflow).
- MM: Release strategies, limits, single-supplier rules, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition modifications.
- BP: Controls on creation/exchange, along with fiscal/banking sensitivity.
- Risk-based sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive Laboratory + Reporting (3h)
- Elevating the roles and access of a critical user.
- Tracing operations (buy/sell) and gathering evidence (SM20/SCU3).
- Documenting findings with captures and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklist for S/4.
- Prioritizing findings and formulating recommendations.
Deliverables:
- A checklist of 20+ controls (FI/MM/SD/BP).
- A quick reference guide for SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- A solid grasp of fundamental auditing principles
- Prior experience working with SAP systems
- Familiarity with compliance and control frameworks
Target Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
It was straight to the point and more practical
Lungelo Ndlela - SNG Grant Thornton
Course - SAP S/4 Hana (S/4Hana)
The interaction between the team and sharing their experience with us
Brenda Toral - Michelin Mexico Services
Course - SAP S/4HANA Overview (S4H00)
Machine Translated
