Publicly traded and highly regulated companies face intense scrutiny from regulators and auditors. Organizations subject to frameworks such as Sarbanes-Oxley (SOX), PCI DSS, FDA regulations, GDPR, CCPA, NIST, Basel III, and ISO 37301 must carefully manage how IT and support teams access production systems through quality ERP support procedures.
NetSuite provides multiple authentication options under the SuiteCloud tab’s Manage Authentication section, each designed for different integration and security needs. Understanding these options is key to implementing SSO effectively.
Multi-Factor Authentication (MFA) is a security control that requires users to verify their identity with more than one method. For ERP systems, this is typically a password plus a time-sensitive code from an authenticator app before gaining access to the system.
In NetSuite, separating access provisioning from system configuration isn’t just about following a segregation of duties checklist—it’s about sharply defining who can do what and ensuring there’s oversight every step of the way. Provisioning rights are limited to a small, approved group who can create, deactivate, and maintain user accounts and role assignments, while configuration rights are given only to those responsible for managing workflows, system settings, and integrations. This separation reduces the risk of accidental configuration changes by provisioning admins, minimizes the number of accounts that could alter key controls, and lowers the probability of critical ITGCs or ITACs being bypassed.
There are several significant headwinds management is facing when scoping, bidding, and awarding the various contracts that are necessary to have a successful implementation. In 2025, we wrote a series of articles and participated in several webinars. If you didn’t catch them, you can access them here.