Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Basic architecture (ABAP, Fiori, catalogs/roles).
-
Key Changes vs. ECC:
- Business Partner.
- Universal Journal (ACDOCA).
- Workflows flexibles.
- AIS location today: transactions and equivalents in Fiori.
Module 2 – Access, roles and essential SoD (2h)
- Users, PFCG, SUIM, SU53, SU24 (authorizations by tcode).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix and typical findings (e.g. creation and release in the same role).
Session 2 (4h)
Module 3 – Security logs and traces (3h)
- Security Audit Log (SM19/SM20): activation, filters, reading.
- STAD/ST03N: usage statistics, sessions and peaks.
- Read Access Logging (RAL): concept and when to use it.
- Good practices for evidence retention and export.
Module 4 – Configuration changes and sensitive data (1h)
- SCU3 (change documents), SCC4 (change policy).
- Critical parameters (RZ10/RZ11): reading and evidence.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: tolerances, OB52 (periods), segregation in entries, journal approval (workflow).
- MM: release strategies, limits, single supplier, changes in conditions.
- SD: Credit limits (FSCM Credit Management), price/condition changes.
- BP: controls on creation/exchange, fiscal/banking sensitivity.
- Risk-driven sampling and selection techniques.
Session 4 (4h)
Module 6 – Comprehensive laboratory + reporting (3h)
- Raise roles and access of a critical user.
- Trace operation (buy/sell) and obtain evidence (SM20/SCU3).
- Document findings with catches and exports.
- Preparation of working papers and traceability.
Module 7 – Closure and action plan (1h)
- Internal control checklist in S/4.
- Prioritization of findings and recommendations.
Deliverables:
- Checklist of 20+ controls (FI/MM/SD/BP).
- Quick guide to SM19/SM20, SUIM, SCU3, STAD/ST03N.
Requirements
- An understanding of basic auditing principles
- Experience with SAP systems
- Familiarity with compliance and control frameworks
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
In question and answer section, we can ask many cases and Mr. Oki is great to make us understand the solution of our issues.
Verified Client
Course - Mastering On-Premise SAP Fiori Development
It was straight to the point and more practical
