Inside Controls 360: one real-shaped SAP controls project, start to finish.
Controls 360 is TIB's SAP SOX/ITGC Controls live class, rebuilt around a single engagement. You work the Corvane Energy project through all 14 workbooks a real controls team uses, from the first system inventory to the final coverage dashboard, on your own live S/4HANA login, with every workpaper reviewed.
The work a controls team actually hands you
- Scope an SAP SOX/ITGC engagement without waiting to be told what to test
- Build the scoping foundation: landscape, interfaces, processes, risks and controls
- Independently test access, change management and journal-entry controls on a live SAP system
- Tell a working control from a broken one that happens to look clean
- Write a workpaper a reviewer signs off without a follow-up question
- Evaluate, group and report deficiencies, and defend the conclusion
- Sit in a room with the SAP team and the audit team and speak both languages
- See the same project from the Lead's chair: scope, delegate, review and govern
The Corvane Energy project, W01 to W14
Corvane Energy Group is a fictitious integrated oil and gas company. Its controls project is built from the same 14 linked workbooks a real engagement uses. Every risk traces to a control, every control to evidence and a test, and every test to a conclusion.
Scope the landscape
Know exactly what is in scope before anyone tests anything.
- W01Landscape & System InventorySystems, servers and transport routes
- W02Interface & Data Flow InventoryInterfaces, RFC and service users, data flows
- W03Module & Business Process ScopeProcesses, technical areas and the financial-statement map
Map risks and controls
Turn scope into the risks that matter and the controls that answer them.
- W04Risk RegisterRisk statements and coverage by business process
- W05Risk & Control MatrixFive-part controls, risk mapping and ITGC dependencies
- W06SoD & Sensitive Access MatrixFunctions, SoD rules, sensitive access and mitigations
- W07Control Evidence & Owner MatrixWho owns each control and what evidence proves it
Gather evidence and test
Request it, log it, plan the test, sample it and document it.
- W08PBC Evidence Request RegisterEvery evidence request, tracked to closure
- W09Evidence Index & IPE LogIndexed evidence and report-reliability (IPE) checks
- W10Test PlanDesign and operating-effectiveness tests for every control
- W11Test WorkpapersWorked, review-ready workpapers
- W12Sample Selection LogPopulations, sample sizes and selected items
Conclude and report
Evaluate what failed, how badly, and what the engagement can rely on.
- W13Deficiency & Remediation LogDeficiencies evaluated, grouped and tracked to remediation
- W14Scoping, Workpaper & Coverage DashboardCoverage, reliance and the engagement summary
You practise on blank templates, then compare your work against the fully populated Corvane version.
Real-sized, not a toy example
The Corvane project is fully populated and internally consistent, so you learn to work at the scale and level of detail a reviewer expects.
Six fully worked test workpapers in W11, used as the model answers you compare your own work against.
Learn to Deliver and Learn to Lead
Your tuition covers both. You do the work, then see it from the reviewer's chair.
Learn to Deliver
- Receive an assignment and understand the risk, control and expected deliverable
- Raise PBC requests, check evidence and IPE
- Select samples, test and write the workpaper
- Take review notes, correct and resubmit
- Escalate exceptions properly
Learn to Lead
- Scope the engagement from W01 to W07
- Plan the testing and assign the work
- Review workpapers and challenge conclusions
- Evaluate and group deficiencies
- Report coverage and reliance to stakeholders
Read it. Argue it. Run it in SAP.
Three layers, in order, every time. Skip the first and the second becomes somebody reading to you.
Pre-class reading
Three prerequisite guides, so the live sessions are the second time you meet each idea, not the first.
Orientation & Q&A
Your questions on the reading, answered in conversation. Then the Corvane project begins.
Reason it on paper
Each topic is worked through on the workbooks first, ending on a decision you must bring an answer to.
SAP demo lab
The facilitator runs the test end to end on a live S/4HANA system, then you run it yourself, display-only, as on a client system.
Submit & get reviewed
Your workpapers are marked by a facilitator, returned with review notes, corrected and resubmitted.
Defend & close
Defend your conclusions in a live discussion. Post-class training manuals keep you going afterwards.
12 live sessions, Saturdays & Sundays, 5–7 PM Eastern, over 6 weeks.
Ninety percent of your grade is the part you can't look up
SAP execution accuracy is ten percent. Everything above it, the part that gets you promoted, is judgement. If you only ever get faster at clicking through transactions, you plateau around year three, exactly when it's most expensive to discover.
- Business risk & control understanding20%
- Testing strategy & population definition15%
- Evidence evaluation15%
- Consultant judgement & escalation15%
- Workpaper & conclusion quality15%
- Stakeholder communication10%
- SAP execution accuracy10%
What six weeks will and won't do for you
Said up front, because anybody promising otherwise is selling something.
This course will notNo shortcuts
- Make you an SAP expert in six weeks
- Teach you ninety transaction codes by rote
- Replace hands-on time on a real engagement
- Hand you a certificate for showing up
This course willBuild the judgement
- Get you stating the risk, control objective, population and evidence plan before you name a screen
- Show you exactly what a reviewer will push back on, and why
- Give you a method that survives every SAP system you'll work in
- Put you on your own live S/4HANA login, testing real controls, with a facilitator watching you reason
$1,500. Nothing metered.
The optional market-readiness and interview coaching add-on is the only extra, at $500.
Honest answers
Do I need to know how to code?
No. You need to know that the rules governing what SAP does are written in code and configuration, and that both can be inspected. That's the skill this course builds.
How much do I need to memorise?
Almost none of it. Familiarity is the target, not recall. You read beforehand so that a live session is the second time you see something, not the first.
Is there an exam?
No. Your assessed work is your workpapers, built the way a real engagement deliverable is built and marked the way one is reviewed.
I've already used SAP. Will this be too basic?
Some of it will be fast for you. But very few SAP users have been taught how a controls engagement is scoped, evidenced and concluded, and that is what this course is built around.
Is the SAP access real or a simulation?
Real. Every trainee gets their own login on a live S/4HANA server, with the same display-only discipline you'd use on a client system, for the full course plus 2 extra months.
What if I miss a session?
Tell your facilitator in advance if you can. Sessions build on each other, so recovery means reading the materials properly and bringing your questions to the next session.
What do I walk away with?
Reviewed workpapers you built and defended, a method that works in any SAP system, a certificate of completion, and a resume and job-search plan built for this role.
What happened to the earlier SOX/ITGC live class?
Controls 360 is its new version: the same live, judgement-first approach, rebuilt around one complete project and both the Deliver and Lead roles.
Six weeks from now, you'll be the one who pulls the report, reads the row and asks the question.
$1,500 for Learn to Deliver + Learn to Lead. Opens Saturday 31 October.