Reserve your seat

Almost there

WEEKDAY TRACK · $950

Seats are confirmed in the order paid. A course administrator will follow up by email with the next open cohort's dates and a payment link.

REQUEST RECEIVED

You're on the list

Check your inbox — we've sent a confirmation, and a course administrator will follow up personally with the next open cohort's dates and a payment link.

The person a Big 4 team calls when the access risk actually lives inside SAP

An eight-week, live training course for the SAP GRC Security & Fiori Consultant role — not a self-paced video library.

Every SAP landscape is one over-broad role away from a segregation-of-duties conflict, and one unreviewed emergency-access session away from an incident nobody can explain afterward. Almost nobody on a typical implementation or support team can trace that risk end to end and actually fix it. That's the seat this course trains you to fill: the GRC/Security specialist who gets pulled onto the engagement because they're the one who can build the fix, not just flag the finding.

Roles this prepares you for

SAP GRC Security Consultant SAP Access Control Analyst SAP Security Administrator IT Access Risk Analyst SAP GRC Implementation Consultant Identity & Access Governance Analyst
🖥️ Live S/4HANA server access — included for the full course, plus 2 extra months after class to keep practicing and prepping for interviews.
8WEEKS, LIVE COHORT
8DOCUMENTED DEFICIENCIES
90%GRADED ON JUDGEMENT
WHAT YOU WALK OUT ABLE TO DO
  • Scope a GRC/Security engagement without waiting to be told what to test
  • Independently trace, build, and fix access risk on a live SAP system — not just recognize it
  • Tell a ruleset that's actually working from one that's gone quietly blind
  • Turn in a fix a reviewer signs off without a follow-up question
  • Sit in a room with the Basis team and the business and speak both languages
SEAT OPEN TWO SCHEDULES, SAME PRICE
Weekday Track $950
Weekend Track $950

Same case, same live instructor, same certificate — four weeks either way. Everything included — nothing metered, nothing upsold.

See pricing & enroll →
The case you'll work

A ruleset that went quiet, and nobody noticed for a year.

Nobody at Calder Ridge Manufacturing disabled anything. A Fiori rollout, a hiring wave, an afternoon nobody had time to look at closely. Then a junior consultant reran an old analysis with current data and found what the ruleset had stopped watching for. That's the job. Four weeks from now, that's you. Everything below — the labs, the builds, the reviews — is built around this one fictional company so you learn to think like a consultant, not memorize 8 disconnected examples.

EXHIBIT — BOOK 1

The Ruleset That Went Quiet

SCOPE
FIX SUMMARY
SEVERITY
STAKEHOLDER NOTES
HELD FOR
REVIEW
The promise

What four weeks will and won't do for you

Say this up front, because anybody promising otherwise is selling something.

This course will not

  • Make you an SAP expert in four weeks
  • Teach you ninety transaction codes by rote
  • Replace hands-on time on a real engagement
  • Hand you a certificate for showing up

This course will

  • Get you diagnosing what's broken, why it matters, and what the fix needs to look like — before you name a screen
  • Show you exactly what a reviewer will push back on, and why
  • Give you a method that survives every SAP system you'll ever work in
  • Put you on your own login on a live S/4HANA server, fixing a real access issue, with a facilitator watching you work through it
The case

One company. Eight failure patterns. Every domain a working GRC/Security consultant touches.

Calder Ridge Manufacturing is fictional. The gaps aren't — each of the 8 Books is built from a real pattern of access or security failure, threaded together so you learn one company deeply instead of 8 disconnected examples.

8 Books across two groups. Every one is taught at full depth and built live in your own practice namespace — nothing here is a shortened summary.
GROUP 1

Who can do what, and who's watching

Access Risk, Emergency Access, Role Design & Workflow

The Ruleset That Went Quiet The Shared Login The Split That Closed a Door The Approval Nobody Sent
GROUP 2

What got copied, missed, or left open

Provisioning, SU24, Remediation & Fiori Security

Copied From Someone Else The Proposal Nobody Updated Resolved on the Report The Tile That Opened Everything
How it runs

Read it. Argue it. Run it in SAP.

Three layers, in order, every time. Skip the first and the second becomes somebody reading to you.

01
SAP from zero
A live three-hour session that introduces the course — not the reading. You leave with three prerequisite guides and an eight-day plan to read them properly.
02
Orientation & your questions
A structured Q&A on the reading — your questions, answered by the group, in conversation — then the main course and the case begin.
03
Theory — three sessions
We work through Group 1 and Group 2 on paper first. Every session ends on a decision you have to bring an answer to, before you've touched SAP once.
04
The SAP demo lab
First hour, the facilitator builds the fix end to end on a real system, thinking it through before touching a transaction. Second hour, you build the same fix yourself.
Your own ZZ_TRAIN_ practice namespace — real configuration, never in production
05
Post-class reading
No sessions. Eight chapters — the S/4HANA landscape, GRC Access Control architecture, and the eight domains the course covers — read at your own pace.
06
Final Q&A and close
The whole cohort back in one room. What you can now do, what comes next, and — if you've earned it — a word about you, specifically.
What you're judged on

Ninety percent of your grade is the part you can't look up

SAP execution accuracy is ten percent. Everything above it — the part that gets you promoted — is judgement.

Business risk & access understanding20%
Diagnostic strategy & scope definition15%
Solution evaluation15%
Consultant judgement & escalation15%
Lab writeup quality15%
Stakeholder communication10%
SAP execution accuracy10%
If you only ever get faster at clicking through transactions, you'll plateau around year three — exactly when it's most expensive to discover. This course is built around the ninety percent instead.
Two schedules, one class

Choose the schedule that fits your week

Same case, same 8 Books, same live instructor, same certificate, same price. The difference is which days you show up.

WEEKDAY TRACK · $950

Live, three evenings a week

  • 8 live sessions across 4 weeks — an opening Saturday, two weeks of Monday/Wednesday/Friday, a closing Saturday
  • Interrupt, argue, get answered in the room
  • Case Lab gates worked live, with people who disagree
WEEKEND TRACK · $950

Live, Saturday and Sunday

  • 6 live sessions across 4 weeks — an opening Saturday, two weeks of Saturday + Sunday, a closing Saturday
  • Same live instructor, same room, same interruptions and arguments
  • Case Lab gates worked live — identical content to the weekday track
INCLUDED EITHER WAY

The same standard

  • Eight hands-on labs, marked and returned within a week
  • Live S/4HANA server access for the full course, plus 2 extra months after class
  • A facilitator who reads what you submit — not an algorithm
  • A certificate of completion, issued to every trainee who finishes
  • Professional resume development and job-search assistance

📅 View full calendar & session-by-session schedule → 📖 New to the terms? See the Glossary →

Who's running it

Built by the person who's sat on the other side of the review

TIB Systems is an SAP Security, GRC and Controls training and advisory firm, built around a consultant with 37+ years across Big 4 SAP GRC and Security practice. This course is built from that seat — what a reviewer actually pushes back on, not what a syllabus says they should. Two additional trained facilitators back the lead — your cohort runs on schedule, not on one person's calendar.

37+Years of Big 4 SAP GRC & Security practice behind the curriculum
3Trained facilitators — a lead plus two backups, so sessions never slip
7Trainees per cohort — small enough that the facilitator reads the room
Enroll

Two schedules in. Nothing metered, nothing upsold.

Same case, same 8 Books, same live instructor, same price. The difference is which days you show up.

SEAT OPEN
WEEKDAY TRACK
$950 ONE TIME · USD

Every session live, three evenings a week, across all four weeks. Interrupt, argue, get answered in the room.

  • Live sessions, Monday / Wednesday / Friday — 8 sessions across 4 weeks
  • Case Lab gates worked live, with people who disagree
  • All 8 Books and the complete Calder Ridge case set
  • The Course Guide and Primary Lab covering all 8 domains, plus your onboarding readiness manual
  • Planning Card and lab-deliverable templates, marked by a facilitator
  • Live S/4HANA server access for the full course, plus 2 extra months after class
  • A certificate of completion, issued to every trainee
  • Professional resume development and job-search assistance
SEAT OPEN
WEEKEND TRACK
$950 ONE TIME · USD

Every session live, Saturday and Sunday, across all four weeks. Same instructor, same room, same interruptions.

  • Live sessions, Saturday & Sunday — 6 sessions across 4 weeks
  • Case Lab gates worked live, with people who disagree
  • All 8 Books and the complete Calder Ridge case set
  • The Course Guide and Primary Lab covering all 8 domains, plus your onboarding readiness manual
  • Planning Card and lab-deliverable templates, marked by a facilitator
  • Live S/4HANA server access for the full course, plus 2 extra months after class
  • A certificate of completion, issued to every trainee
  • Professional resume development and job-search assistance

Cohorts run at 7 trainees. Seats are confirmed in the order paid.

Before you enroll

Honest answers to the questions people actually ask

No. You need to know that the rules governing what SAP does are written in code and configuration, and that both can be inspected. That's a different skill, and it's the one this course builds.

Almost none of it. Familiarity is the target, not recall. You read beforehand so that when you meet something in a live session, it's the second time you've seen it — not the first.

No. There are readiness checklists in the pre-class guides, for you alone. Your assessed work is eight hands-on labs, built the way a real engagement deliverable is built and marked the way one is reviewed.

Some of it will be fast for you — the Foundations guide especially. But almost nobody who has used SAP has been taught why the security architecture is shaped the way it is, and that's the part the course is actually built around.

Tell your facilitator in advance if you can. Sessions build on each other, so recovery means reading the relevant materials properly and bringing your questions to the next live session.

Eight real hands-on labs you built and defended, a method — the diagnostic approach — that works in any SAP system you're staffed onto next, a certificate of completion, and a resume and job-search plan built specifically for landing this role.

A real one. Every trainee gets their own login on a live S/4HANA server, with a dedicated practice namespace for hands-on builds — the same tools, the same screens, the same discipline of never touching a production object that you'd use on an actual client system. Access runs for the full course, plus 2 extra months after class to keep practicing and prepping for interviews.

Two additional trained facilitators back the lead facilitator, so a single person's schedule never holds up your cohort.

Four weeks from now

You'll be the one who pulls the report, reads the row, and asks the question.

Seven seats a cohort. $950, one time — weekday or weekend, both fully live.