Audit and Security of SAP ERP - ASE241

Audit and Security of SAP® ERP

Audit and Security of SAP ERP - ASE241
ENROLL IN THIS COURSE

Upcoming Dates & Locations

Audit and Security of SAP ERP - ASE241

CPE:32


Price: $2063.00


Overview

This course covers the risks inherent in the SAP application and review some of the most effective controls that can be configured into the application. It covers navigation and the critical business processes that ensure that SAP is working as intended, including security, administration, change control, and the financials, controlling, materials management, sales and distribution, production planning, human capital management, and business warehouse.


Who Should Attend

Financial, Operational, Business Application, and IT Auditors; Audit Directors and Managers; Compliance Managers; SAP® Security and Support personnel


Prerequisites

  • IT Auditing and Controls (ITG101)
  • IT Audit School (ITG121), or equivalent experience.

What You’ll Learn

You will learn about the application’s risks and controls, the core elements of the application, and how to audit the application effectively.


Objectives

1. SAP® Overview and Concepts:

  • terminology
  • SAP naming conventions
  • ERP Central Component and NetWeaver Architecture
  • general SAP controls and risks

2. SAP Audit Fundamentals:

  • ERP systems: audit implications
  • high-level approach for auditing SAP
  • getting started
  • using a process-based approach
  • example audit recommendations and tips

3. Basic Navigation for Auditors:

  • getting started
  • running transactions and reports
  • selecting field values
  • browsing tables
  • reviewing configuration settings
  • Audit Information System (AIS)

4. SAP Security:

  • security overview and key risks
  • system parameters
  • other password-related settings
  • SAP Authorization Concept
  • key steps to auditing SAP security
  • security best practices

5. SAP Administration and Change Control:

  • Basis functional overview
  • ABAP/4 Workbench
  • Implementation Management Guide (IMG)
  • Computer Center Management System (CCMS)
  • Transport Management System (TMS)
  • managing change: more than just transports
  • dealing with emergencies
  • key risks
  • primary audit activities
  • tips for achieving strong change management

6. SAP Modules:

  • FI: Financials
  • CO: Controlling
  • MM: Materials Management
  • SD: Sales and Distribution
  • PP: Production Planning
  • HCM: Human Capital Management
  • BI Business Warehouse
  • other modules

7. FI: Financials and CO: Controlling Risks and Controls:

  • configured control opportunities
  • other process-related controls
  • useful reports and security considerations

8. MM: Materials Management Risks and Controls:

  • configured control opportunities
  • other process-related controls
  • useful reports and security considerations

9. SD: Sales and Distribution Risks and Controls:

  • configured control opportunities
  • other process-related controls
  • useful reports and security considerations

10. Other Modules (based on class interest) :

  • configured control opportunities
  • other process-related controls
  • useful reports and security considerations

11. SAP Governance Risk and Compliance (GRC) Solutions:

  • SAP Risk Management
  • SAP Access Control
  • SAP Process Control
  • SAP Global Trade Services
  • SAP Fraud Management
  • SAP Audit Management

12. Advanced SAP Auditing Techniques:

  • audit challenges in the SAP system
  • advanced audit tools within and outside SAP
  • transactional analysis opportunities
  • using advanced audit analytics tools: IDEA and ACL

13. Implementations and Upgrades


Why You Should Attend

You should attend because auditors at organizations using SAP ERP should know how to navigate the application and audit its core functions.

ACI Learning is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.nasbaregistry.org.

ENROLL IN THIS COURSE