Security & GRC · TIB-PATH-SEC-SENIOR

Security Senior Path

Build and fix SAP roles, run GRC Access Control, support audits and work the production war room.

Request Course InformationCompare Pathways
13Stages
148Guided steps
~115Practice hours
Project, final exam, interviewCapstones
Who it is for

Junior and mid-level SAP security and GRC consultants with theoretical knowledge who need independent practical capability.

Your target role

A Security and GRC Senior who can build and fix roles, operate GRC Access Control, support audits and resolve production incidents.

Official brochure structure

Course stages

Live, instructor-led teaching, guided SAP labs and app-based practice in the sequence of the job.

01   Foundations: controls basics and SAP navigation
02   Security fundamentals, role engineering and troubleshooting
03   Thornfield Team Chapters 1 and 3: red project and honest status
04   S/4HANA, Fiori and least privilege
05   SAP GRC: ARA, ARM, BRM, EAM, SoD and access reviews
06   Thornfield Team Chapter 2: GRC ruleset after merger
07   Thornfield access cases in SAP
08   Team Chapters 4, 5 and 12: access finding and evidence limits
09   SOX, ITGC and audit support
10   Advanced diagnostics and production war room
11   Job readiness: security and GRC assurance
12   Team Chapters 8 and 10: sampling and remediation closure
13   Enterprise Project 1, 45-question final exam and Senior interview
Important curriculum clarification

Why a security course starts with control basics

Security work is control work. An SoD conflict is a risk, a mitigating control is a control, and an access review is a detective control. GRC Access Control assumes you already know what preventive, detective and mitigating mean.

Daily security work

Understand the risks behind access

Role design, access requests, segregation of duties, emergency access and access reviews all involve risk and controls. Control basics explain why access decisions matter, not only how to configure them.

Audits and exams

Explain security evidence

SOX, ITGC and audit support (Stage 9) and the Security Final Exam's SOX/ITGC section rely on this vocabulary. Security consultants must be able to explain access and change evidence to auditors.

Professional readiness

Speak the language of the job

Interviewers ask SAP Security and GRC consultants about controls because many SAP security roles sit within SOX programmes. This foundation helps you work effectively with audit and compliance teams.

Why this is not a Controls specialist course: The Security pathway teaches the control concepts necessary to design, operate, review and defend SAP security and access. The separate Controls & Compliance pathway teaches specialist controls scoping, testing methodology, evidence evaluation, deficiency reporting and controls leadership.

Security Senior: control foundations begin in Stage 1, underpin GRC Access Control in Stage 5, and support SOX/ITGC audit work in Stage 9. Security Lead: the complete Senior core is included in Stages 1–13 before the advanced Lead stages.

Compare Controls Senior · Compare Controls Lead

Proven, not just attended

Assessment and progression

70% for each team chapter; 60% on the 45-question Security Final Exam; graded Senior role interview.

Training combines practitioner-led live classes, TIB-hosted SAP/GRC labs, the TIB SAP Training Assistant, Thornfield scenarios and relevant Corvane or Enterprise Project work. Existing Academy application access is not changed by this website update.

Related course: Security Lead

Fees and next confirmed cohort dates: contact TIB for current information.

Request Course Information