The International Leader in Audit and Information Security Training

EARN 30 CPE CREDITS

HOW TO AUDIT SAP R/3 BASIS

High-Risk Areas in the SAP R/3 Infrastructure and How to Mitigate Them

13th - 16th November 2007, London

COURSE DIRECTOR FRANK LYONS

In this four-day programme you will: Learn how to audit the SAP R/3 system infrastructure Develop the necessary skills for tackling SAP R/3 control challenges Gain a thorough understanding of how to implement and manage an online and e-commerce based SAP R/3 environment

WWW.MISTIEUROPE.COM

How to Audit SAP R/3 Basis

13th - 16th November 2007, London

SEMINAR FOCUS AND FEATURES

This intensive, four-day seminar is designed for technical auditors charged with auditing the infrastructure of the SAP R/3 system and focuses on the control challenges inherent in implementing and managing an online and e-commerce SAP R/3 environment using the Basis Module.

"A very good course which provides the core knowledge required to audit SAP R/3 Basis HM Revenue & Customs

Prerequisite
You should have first attended SAP R/3 Concepts and Audit Risks, or have equivalent experienceg

Learning level
Advanced

Who Should Attend

Internal, Financial, Operational, and Information Technology Auditors; Security Professionals

COURSE DIRECTOR FRANK LYONS

Frank W. Lyons, CISA, is a consultant specialising in developing, managing, securing, and auditing large and small networked information systems. A recognised leader in the field, he has been involved in data security and database technology for nearly 21 years. As IS Audit Manager for Blue Shield and Sun Banks, Mr. Lyons designed a functional approach to IS auditing that he later used as Manager of Advanced Technology for the Institute of Internal Auditors. He has been with Cullinet Database Systems and a partner in the Plagman Group where he developed database auditing and data security seminars.

Fee
GBP 2,099

EARN 30 CPEs

MIS Training 2007

AGENDA DAY ONE

SAP R/3 Fundamentals Review Overall architecture Direct transaction process Internet transaction process E-commerce solutions MySAP .com B2B solutions SAP R/3Terms System & technical architecture Internet Transaction Server (ITS) Audit and security features in the new releases SAP R/3 Basis System Definition of the role of the Basis module Configuration settings for Basis Programme controls: authentication, defaults, transaction Standard profiles Activity groups Standard authorisation SAP R/3 object definitions Data dictionary control and maintenance ABAP/4 programming controls Processing types Object and component programming (RPCs), User Exits, CPIC

DAY TWO
SAP R/3 Records User master Customer Vendor Other key master records Table maintenance controls Auditing Standards User access Profile changes Activity groups and profile generator Authorisation change User administration changes Transaction & document trails Log files Archiving SAP R/3 system logs SAP R/3 application logs Operating logs Operating system audit capability Operating system audit logs Database systems DBMS logs & audit logs Transaction logs User logs Transaction type & activity logs SP R/3 audit tools and techniques Case Study: Look at how the organisational risk register can be used to develop the annual audit plan

DAY THREE
SAP R/3 Administration System and database administration Security administration Basis administration Internet Transaction Server Definition E-commerce solution MySAP .com Transaction controls BAPIs Programme control Database controls B2B solutions Data integration between solutions sets Risk and control points Real-World Solutions to SAP R/3 Audit and Control Special rights and access Configuration and set-up problems and controls System administration and segregation of duties Development rights Access building for SAP R/3 Business objects Interface advisertechnique

h Understanding SAP R/3Communications Key objects Key processes IDOCs CPIC ITS ALE Background processes Batch processes EDI transaction control Network controls Middleware controls Remote communication controls Audit trails

DAY FOUR
Correction and Transport System Control Platform separation Configuring CTS Correction process Transport process Version control Delta control Audit logs Authorisation process Table reporting Emergency fixes Testing approach Test decking Integrated testing facility An Audit Approach Auditing the system tiers Auditing the infrastructure Evaluating audit trails Auditing the Basis Module Conversion controls System implementation Audit approach

"Frank knows what he is talking about and has the ability to convey it and repeat it in a comprehensive and funny way IT Service Trainer, Airbus Deutschland

REGISTRATION FORM

IN-HOUSE TRAINING
Save up to 50% on training
Tailored Training for your team and Save up to 50% If you have to comply with Sarbanes-Oxley, just installed a new ERP system, recruited new staff - or maybe you are keen to secure your network, take preventative measures to counteract fraud or comply with the latest legislation. Either way if you have 5 or more people who require training on the same topic, MIS can tailor training courses to meet your exact needs and budget, saving you up to 50%. We charge per day and NOT per participant so the cost remains the same regardless of how many people you have in your team.

When registering please quote reference WEB

I would like to receive information about running this course in-house

With In-House Training You Will:

Save money over public seminar fees in addition to savings on travel and accommodation costs. Save time on travel as the instructor will travel to you. Furthermore, the training can be held at the most convenient time for you. Ensure the relevance of the seminar for your organisation and industry. You may wish to tailor the structure and methodology of your seminar or customise the seminar to meet the expertise levels of your attending employees.

How to Audit SAP R/3 Basis

(please photocopy form for additional delegates) (MT2204)

5 easy ways to register

Tel: +44 (0)20 7779 8944 Fax completed form to: +44 (0)20 7779 8293 Email: mis@mistieurope.com Web: www.mistieurope.com Post completed form to: Carlos Doughty, MIS Training, Nestor House, Playhouse Yard, London EC4V 5EX UK

13th - 16th November 2007, London GBP 2,099 10% discount* + VAT @ 17.5% Grand Total

*Discounts: Government, 10% off regular fees. Groups of 3 or more, 10% off regular fees. Discounts can not be used in conjunction with each other. Fees must be paid in advance of the event.

Customer Information
Title Title/Position E-Mail Address (Required) Address Country Telephone VAT Number [If you have one]
The information you provide will be safeguarded by the Euromoney Institutional Investor PLC group whose subsidiaries may use it to keep you informed of relevant products and services. We occasionally allow reputable companies outside the Euromoney Institutional Investor PLC group to contact you with details of products that may be of interest to you. As an international group we may transfer your data on a global basis for the purposes indicated above. If you object to contact by telephone , fax , or email please tick the relevant box. If you do not want us to share your information with other reputable companies please tick this box .

First name

Surname Organisation

Please send me information on: In House Training Security & Audit of TCP/IP Networks & Web Technology, 3rd - 5th December 2007, London Advanced Audit Techniques for Windows 2003 & Actie Directory, 23rd - 25th October 2007, London

Registration Information
(fees must be paid in advance of the event) Postcode Fax
Accommodation: MIS Training has negotiated special accommodation rates at Radisson Edwardian hotels. For further information please visit www.radissonedwardian.com/mis or email mistraining@radisson.com. Cancellation Policy: Should a delegate be unable to attend, a substitute may attend in his or her place. Cancellations received within 21 working days of the event are liable for the full seminar fee. If full payment has been received you are eligible for a 75% reduction on the next run of the seminar. This discount will be valid for one year only. MIS reserves the right to change or cancel programmes due to unforeseen circumstances. VAT: All delegates attending are liable to pay VAT. After the event organisations registered for VAT in the UK may reclaim the tax. Delegates from outside the UK but within the European Community may also be able to reclaim the VAT. Organisations outside the UK should check with their excise authority as to which domestic fiscal regulations apply. High Yield/No-Risk Guarantee: Attend these workshops and receive tools and techniques that will help you do your job better. If you do not, simply tell us why on your company letterhead and we will give you a full credit toward another programme. If you have any other queries please visit www.mistieurope.com/FAQs

Payment Information
You can now pay online at www.mistieurope.com
Cheque enclosed (payable to MIS Training) Please debit my credit card Card Number Cardholders name AMEX VISA Please invoice my company PO# MasterCard Expiry Verification Code

Please include billing address if different from address given

Please note that in completing this booking you undertake to adhere to the cancellation and payment terms listed below Signature Approving Manager Date Position