TRK · 02
No-Access Track taught you to judge evidence someone else handed you. This is where you learn to go get it yourself — the same fifteen domains and sixty-four items, but now you're the one inside SAP and SAP GRC producing them, screen by screen.
Evidence Capture Training · direct one-to-one companion to No-Access Track · SAP GRC sandbox access required
Background
No-Access Track is deliberately built so you never have to touch a live SAP system — you're handed the evidence and asked to judge it. That's the right way to build judgment fast. But it leaves a real gap: it never teaches you where a SUIM extract, a GRC risk analysis, or an audit log actually comes from, or how someone produces it in the first place. This course closes that gap directly. Same fifteen domains. Same sixty-four items. This time, you're the one navigating to the screen, running the report, and deciding how the evidence gets saved.
This course is a direct one-to-one companion to SAP Controls Analyst — No-Access Track — every item here matches an item you already judged there.
View No-Access Track →The core skill
Most training glosses over this. A real controls analyst has to know, screen by screen, whether what's in front of them is something you export as a working file, or something where the screenshot itself is the entire piece of evidence. Getting this wrong either wastes time hunting for an export button that doesn't exist, or hands in a screenshot when a real file was expected.
The screen shows a list or report — a SUIM extract, a GRC risk analysis, an audit log query. You run it, export it (Excel/PDF), and the exported file is the evidence a reviewer actually works from.
A configuration or display screen with nothing to export — a PFCG authorization tab, an RZ11 parameter, an SM59 destination. The screenshot itself is the complete, final evidence.
Who it's for
You'll feel at home here if
You've completed (or are partway through) No-Access Track and can already recognize a control exception — you just haven't produced the evidence yourself yet. Also a strong fit if you're comfortable with SAP navigation basics and want to build real screen-level fluency before Mastery Console's live labs.
What you need to start
Access to an SAP GRC sandbox — the same access No-Access Track deliberately doesn't require. If you don't have one yet, this is the point in the sequence where getting one becomes worth it.
Scope covered
Every domain below matches a chapter in No-Access Track exactly. Where that track had you read a SUIM extract, this course has you navigate to SUIM, run it, and export it yourself.
Navigating and exporting user, role, and authorization reports.
Building and displaying roles, capturing authorization tabs correctly.
Running GRC risk analysis and SU24/SU25 checks, and exporting the results.
Navigating catalog configuration and target mapping screens.
Producing firefighter activation and session logs from GRC EAM.
Navigating request status, approval history, and aging reports.
Producing campaign decision history and population evidence.
Running remediation tracking and What-If simulation reports.
Locating and screenshotting control-testing and monitoring evidence.
Producing table-change history and technical-settings evidence.
Navigating import queues and transport ownership evidence.
Producing batch-job schedule, execution, and change evidence.
Navigating destination configuration and trust relationship screens.
Producing profile-parameter evidence from RZ11.
Running and exporting filtered audit-log evidence.
Course layout
Every item names the SAP or GRC tool, tells you exactly what the evidence is supposed to show, and gives numbered navigation steps to get there — not a vague pointer to "check SUIM."
Each item is marked "export as file" or "screenshot only" before you start, so you're never guessing which one applies or hunting for a button that isn't there.
A full step-by-step capture guide ships alongside the course — the same document used to build this course's own content — for offline reference while you're in the sandbox.
A consistent naming convention across all 64 items, with progress tracked automatically so you always know what's left.
What you'll walk away with
Included free with the self-paced bundle — sign in and start matching evidence to No-Access Track item 1.