Get in Touch

Course Outline

R/3 Essentials for Auditors

  • Foundational architecture concepts, including the ABAP stack, SAP GUI, and the client structure.
  • Key distinctions from legacy systems, particularly regarding modular design (FI, MM, SD).
  • Standard transactions and navigation techniques specific to audit tasks.

Access Management, Roles, and Core SoD

  • User administration and authorization management via PFCG, SU01, SUIM, SU53, and SU24.
  • Role design principles and functions highly relevant to auditing.
  • Basic Segregation of Duties (SoD) matrices and common findings, such as conflicting invoice creation and approval permissions.

Security Logging and Tracing

  • Managing the Security Audit Log (SM19/SM20): activation, filtering, and report generation.
  • Utilizing STAD and ST03N for usage statistics, session monitoring, and workload analysis.
  • Best practices for retaining and exporting audit evidence.

Configuration Modifications and Sensitive Data

  • Reviewing change documents (SCU3) and client settings (SCC4).
  • Identifying and monitoring critical system parameters using RZ10/RZ11.

Process Controls in R/3 (FI/MM/SD)

  • FI: Managing tolerances, posting periods (OB52), and journal entry approvals.
  • MM: Implementing release strategies, purchase order limits, and single-supplier controls.
  • SD: Monitoring credit limits, pricing adjustments, and conditions.
  • Applying audit sampling techniques for rigorous process testing.

Comprehensive Laboratory and Reporting

  • Examining roles and authorizations for high-risk users.
  • Tracing purchase and sale operations to secure audit evidence via SM20 and SCU3.
  • Recording findings with supporting screenshots and data exports.
  • Preparing working papers and ensuring full traceability.

Conclusion and Action Planning

  • Applying an internal control checklist specifically for R/3.
  • Prioritizing audit findings and developing actionable recommendations.

Course Deliverables

  • A comprehensive checklist containing over 20 controls for FI, MM, and SD.
  • A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.

Requirements

  • A solid grasp of fundamental auditing principles.
  • Prior experience working with SAP systems.
  • Working knowledge of established compliance and control frameworks.

Target Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers
 16 Hours

Number of participants


Price per participant

Testimonials (2)

Upcoming Courses

Related Categories