Introduction to Auditing SAP ERP (IIA/Deloitte)

• Understand how the implementation of SAP will impact the internal audit department.
• Identify ways to reengineer the audit to perform an effective and efficient audit in an SAP environment. environment.
• Acquire a baseline knowledge of the structural elements and functions of SAP ERP (successor product to SAP R/3).
• Acquire a baseline knowledge of SAP ERP technical features and functions including an introduction to SAP ERP security and SAP Governance, Risk, and Compliance (GRC) suite of tools (formerly known as Virsa).
• Learn internal control features and functions of the core SAP ERP business processes.
• Experience working online in an SAP ERP Core Component (ECC) Version 6.0 system.

• Financial and operational auditors
• Information technology auditors
• Members of SAP implementation teams
• Financial and accounting staff members concerned with SAP ERP internal controls
• Audit management personnel

Prerequisites: None
Advanced Preparation: None
Delivery Method: Group-Live

---

For internal audit professionals working in a SAP environment, this course provides an essential knowledge base as well as hands-on training in an SAP ERP system. Note: Most concepts apply to SAP R/3 environments.p>

The curriculum for this dynamic seminar includes lectures, group discussions, case studies, and practical exercises, allowing participants to explore the many ways that an SAP implementation impacts internal auditing. You will also learn the structural elements and technical features of SAP ERP, obtain an introduction to SAP ERP security, and gain an understanding of the internal control features and functions of the various SAP ERP business processes. You will also obtain an introduction to the SAP GRC suite of tools formerly known as Virsa.

Financial and operational auditors, IT auditors, SAP implementation teams, financial and accounting staff members concerned with SAP ERP internal controls, and audit management personnel will all benefit from this comprehensive course, which is taught by Deloitte & Touche practitioners with real-world IT audit experience.

SAP Overview

• SAP company profile
• SAP ERP product
• SAP ERP modules and SAP ERP business process
• Technical architecture
• Audit cycles
• Link between the SAP modules, business cycles, and audit

SAP ERP Navigation

• Logging on
• Screen components
• System navigation
• Session management

Organization Model

• SAP organizational model concept
• Structural components of the SAP organizational model (financial view, materials view, sales and distribution view)
• Risks and control issues related to the organizational model structures

Risks and Audit Issues

• Key business risks
• Specific audit risks
• Lessons learned
• SAP audit resources

Master Data

• Importance of master data
• Master data concepts
• Types of master data
• Maintenance, administration, and auditing

Introduction to Security

• Components of security
• Security authorization concept
• Profile generator
• Security authorization mechanics
• Key security tools, reports, and transactions
• Audit issues relating to SAP security

SAP ERP Financial Accounting (FI)

• FI module overview
• FI sub-modules
• Process controls (common controls, FI controls)

SAP ERP Sales and Distribution (SD)

• Key features and functions
• Process controls

SAP ERP Materials Management (MM)

• Key features and functions
• Goods Receipt Invoice Receipt overview
• Process Controls

SAP ERP IMG

• Overview of SAP's Implementation Guide (IMG)
• Navigating the IMG structure
• Impact on audit

SAP ERP Controlling (CO)

• Key features and functions
• Process controls

SAP ERP Human Resources (HR)

• HR overview
• Key features and functions
• HR security

Introduction to SAP Governance, Risk, and Compliance

• Introduction to SAP's Governance, Risk and Compliance suite (formerly known as Virsa)
• How to run security queries

Basis Component Overview

• Basis Component (BC) overview
• BC features and functions
• Impact on audit

SAP ERP Audit Planning

• Team development
• Data gathering
• Defining audit requirements
• Define audit tasks

Business Cycle Controls

• Approach to business cycle controls
• General risks and audit considerations
• Business cycle overview