ACCESS Audit SAP User Access

Audit your SAP Fixed Assets for red flags — assets that may have been misappropriated or diverted for use in parallel businesses.

Multiple courses · Self-paced · Certificate of completion

€540,00 / year

Annual subscription

WHAT YOU'LL LEARN

By the end of this course, you'll be able to:

Read SAP purchase orders

Identify key audit checkpoints: PO date discrepancies, supplier matches, approval workflows, three-way match exceptions.

Spot data quality issues

Find duplicate suppliers, missing tax IDs, inconsistent payment terms, and master data gaps that cause downstream audit problems.

Run your first P2P audit

Apply the methodology to live SAP data. Generate an audit workpaper that finds at least 3 control gaps in your first run.

WHAT'S included

Inside this learning path.

IT03_02: Transactions Entered By Users That Are Away

IT03_01: Transactions Entered By Users That Have Left The Company

IT02_30: Price Change And Document Entry

IT02_29: Users Enter Own Transactions

IT02_28: Same Users Changing IBANs And Making Payments

IT02_27: Same Users Update Personnel And Run The Payroll

IT02_26: Same Users Entering Payments And Manage Treasury

IT02_25: Same Users Entering Fixed Assets And Transactions For These Assets

IT02_24: Same Users Entering Articles And Transactions

IT02_23: Same User Enters Purchase Orders And Sales Orders

IT02_22: Same Users Entering Invoices And Payments

IT02_21: Same Creators And Approvers Of Invoices

IT02_20: Same Creators And Approvers Of Sales Orders

IT02_19: Same Creators Of Customers And Payments

IT02_18: Same Creators Of Customers, Sales Orders, Invoices And Payments

IT02_17: Same Creators Of Customers, Sales Orders, Goods Issues, Invoices And Payments

IT02_16: Same Creators Of Customers, Sales Orders, Goods Issues And Invoices

IT02_15: Same Creators Of Customers, Sales Orders And Invoices

IT02_14: Same Creators Of Customers, Sales Orders And Goods Issues

IT02_13: Same Creators Of Customers And Sales Orders

IT02_12: Same Users Entering Invoices And Payments

IT02_11: Same Creators And Approvers Of Invoices

IT02_10: Same Creators And Approvers Of Purchase Orders

IT02_09: Same Creators Of Suppliers And Payments

IT02_08: Same Creators Of Suppliers, Purchase Orders, Invoices And Payments

IT02_07: Same Creators Of Suppliers, Purchase Orders, Goods Receipts, Invoices And Payments

IT02_06: Same Creators Of Suppliers, Purchase Orders, Goods Receipts And Invoices

IT02_05: Same Creators Of Suppliers, Purchase Orders And Invoices

IT02_04: Same Creators Of Suppliers, Purchase Orders And Goods Receipts

IT02_03: Same Creators Of Suppliers And Purchase Orders

IT02_02: Same Creator General Ledger Account, Journal Entry

IT02_01: User Transactions Conflict With SOD Matrix

Identify users that enter transactions using transaction codes that are in conflict compared to the SOD matrix

IT01_04: Transactions Entered Simultaneously By Same User ID

IT01_03: External Employee Transactions

IT01_02: Fire-Fighter Transactions

IT01_01: Manual Journal Entries By Generic/ High-Profile Users

MEET YOUR INSTRUCTOR

25 years inside SAP audit rooms.

Claire Worledge

Founder, 300Framework · Former Big 4 SAP audit lead

For 25 years I sat on the audit side of SAP — chasing exceptions, untangling P2P breakdowns, explaining to finance teams why their controls weren't catching what they thought.

The 300Framework distills what actually works: the questions that surface real risk, the SAP queries that pull the right data, the workflows that turn findings into fixes. It's the playbook I wish I'd had on day one.

SAP Certified · Big 4 alumna · 189 courses authored · Based in Lisbon

ABOUT THIS learning path

What you're getting into.

This learning path teaches you how to audit your SAP user access data to catch control weaknesses and policy violations hiding in your system permissions.

You’ll learn to spot:

Segregation of duties issues — user access combinations that create conflicting or risky permissions
Sensitive user activity — transactions entered by users with elevated or sensitive access
Compliance risk — non-compliance with IT policies and access controls

By the end of this learning path, you’ll be able to run these checks yourself and build a repeatable process for keeping your user access clean and audit-ready.

READY WHEN YOU ARE