What does ERP Security and
Controls Assurance include?
Segregation of Duties (SOD) Reports list Users and Responsibilities that violate of SOD Polices based on the assignment of Security Configuration.
Restrictive Functions list Users and Roles that have access to functions that can significantly impact financial results and business operations.
Sensitive Data list tables and database objects where sensitive data resides. Access to sensitive data such as employee social security numbers, customer credit cards and vendor banking accounts must be protected.
Application Setups Reports help document key setups to “baseline” applications for change controls, support, new deployments, patching and upgrades.
Suspicious Transactions reports list transaction that can lead to fraud, financial losses and inaccurate reporting.