2010-09-01
Our client had no reporting in place to give them visibility of their staff members’ responsibilities when accessing the main ERP system.
We were quickly able to identify the key data extracts required from the system and developed reporting which highlighted clear breaches of good segregation of duty practice. These included the ability to create vendors as well as raise purchase orders, receipt goods or services and approve payment of invoices.
By giving the client a thorough understanding of their current issues, our tactical reports helped feed into the client’s longer term approach to ensuring adherence to segregation of duty policies.