Course Outline

Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
  • Basic architecture (ABAP, Fiori, catalogs/roles).
  • Key Changes vs. ECC:
    • Business Partner.
    • Universal Journal (ACDOCA).
    • Workflows flexibles.
  • AIS location today: transactions and equivalents in Fiori.
Module 2 – Access, roles and essential SoD (2h)
  • Users, PFCG, SUIM, SU53, SU24 (authorizations by tcode).
  • Fiori catalogs and roles (app-id, catalog, space).
  • Basic SoD matrix and typical findings (e.g. creation and release in the same role).

Session 2 (4h)
Module 3 – Security logs and traces (3h)
  • Security Audit Log (SM19/SM20): activation, filters, reading.
  • STAD/ST03N: usage statistics, sessions and peaks.
  • Read Access Logging (RAL): concept and when to use it.
  • Good practices for evidence retention and export.
Module 4 – Configuration changes and sensitive data (1h)
  • SCU3 (change documents), SCC4 (change policy).
  • Critical parameters (RZ10/RZ11): reading and evidence.

Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
  • FI:  tolerances, OB52 (periods), segregation in entries, journal approval (workflow).
  • MM:  release strategies, limits, single supplier, changes in conditions.
  • SD:  Credit limits (FSCM Credit Management), price/condition changes.
  • BP:  controls on creation/exchange, fiscal/banking sensitivity.
  • Risk-driven sampling and selection techniques.

Session 4 (4h)
Module 6 – Comprehensive laboratory + reporting (3h)
  • Raise roles and access of a critical user.
  • Trace operation (buy/sell) and obtain evidence (SM20/SCU3).
  • Document findings with catches and exports.
  • Preparation of working papers and traceability.
Module 7 – Closure and action plan (1h)
  • Internal control checklist in S/4.
  • Prioritization of findings and recommendations.
Deliverables:
  • Checklist of 20+ controls (FI/MM/SD/BP).
  • Quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.

Requirements

  • An understanding of basic auditing principles
  • Experience with SAP systems
  • Familiarity with compliance and control frameworks

Audience

  • Auditors
  • Internal control specialists
  • SAP security consultants
  • Compliance officers
 16 Hours

Delivery Options

Private Group Training

Our identity is rooted in delivering exactly what our clients need.

  • Pre-course call with your trainer
  • Customisation of the learning experience to achieve your goals -
    • Bespoke outlines
    • Practical hands-on exercises containing data / scenarios recognisable to the learners
  • Training scheduled on a date of your choice
  • Delivered online, onsite/classroom or hybrid by experts sharing real world experience

Private Group Prices RRP from £5700 online delivery, based on a group of 2 delegates, £1800 per additional delegate (excludes any certification / exam costs). We recommend a maximum group size of 12 for most learning events.

Contact us for an exact quote and to hear our latest promotions


Public Training

Please see our public courses

Testimonials (3)

Provisional Upcoming Courses (Contact Us For More Information)

Related Categories