Course Outline
Session 1 (4h)
Module 1 – S/4HANA Fundamentals for Auditors (2h)
- Core architecture components (ABAP, Fiori, catalogs/roles).
- Key differences from ECC:
- Business Partner concept.
- Universal Journal (ACDOCA).
- Flexible workflows.
- Current status of AIS: transaction equivalents in Fiori.
Module 2 – Access, Roles, and Essential SoD (2h)
- User management, PFCG, SUIM, SU53, and SU24 (authorization objects by transaction code).
- Fiori catalogs and roles (app-id, catalog, space).
- Basic SoD matrix analysis and typical findings (e.g., creation and release within a single role).
Session 2 (4h)
Module 3 – Security Logs and Traces (3h)
- Security Audit Log (SM19/SM20): activation, filtering, and analysis.
- STAD/ST03N: interpreting usage statistics, sessions, and activity peaks.
- Read Access Logging (RAL): core concepts and application scenarios.
- Best practices for evidence retention and export.
Module 4 – Configuration Changes and Sensitive Data (1h)
- Change documents (SCU3) and change policies (SCC4).
- Critical parameters (RZ10/RZ11): interpretation and evidence gathering.
Session 3 (4h)
Module 5 – Process Controls (FI/MM/SD) in S/4 (4h)
- FI: Tolerances, open periods (OB52), segregation of journal entries, and approval workflows.
- MM: Release strategies, purchasing limits, single-source procurement, and condition changes.
- SD: Credit limits (FSCM Credit Management) and price/condition adjustments.
- BP: Controls on creation/exchange and sensitivity of fiscal/banking data.
- Risk-based sampling and selection methodologies.
Session 4 (4h)
Module 6 – Comprehensive Laboratory + Reporting (3h)
- Escalating roles and access for a critical user profile.
- Tracing operational activities (buy/sell) and securing evidence (SM20/SCU3).
- Documenting findings with supporting captures and exports.
- Preparing working papers and ensuring traceability.
Module 7 – Closure and Action Plan (1h)
- Internal control checklist specific to S/4.
- Prioritizing findings and formulating recommendations.
Deliverables:
- A checklist of over 20 controls covering FI/MM/SD/BP.
- A quick reference guide for SM19/SM20, SUIM, SCU3, and STAD/ST03N.
Requirements
- Foundational knowledge of auditing principles.
- Working experience with SAP systems.
- Familiarity with established compliance and control frameworks.
Audience
- Auditors
- Internal control specialists
- SAP security consultants
- Compliance officers
Testimonials (2)
The training provided valuable insights into ABAP CDS and Fiori capabilities, helping me better understand the system functionalities already available within the company and opportunities to optimize their utilization. It also enhanced my understanding of how SAP technologies can support reporting, analytics, and business process improvements.
Melita Widya Ningrum - PT. TELKOM INDONESIA
Course - Custom SAP S/4HANA Financials, GRC, Fiori Analytics & ABAP Technical Foundation Masterclass
It was straight to the point and more practical
