Application Access Controls form the foundation of your control environment in your ERP system. However, these new SaaS systems have become quite complex. And organizations tend not to have a program to develop and manage these controls. This is why more and more organizations are partnering with outside advisory firms to help. So, what are your options?
The lack of maturity of external auditing procedures is finally attracting more of the attention it deserves. The US’s Public Company Accounting Oversight Board (PCAOB) and the UK’s Financial Reporting Council (FRC) are publicly challenging external auditors to improve their processes.
![Lack of Software to Test Access Controls is Systemic and Why It Matters [Part 2]](https://7552374.hs-sites.com/hubfs/Imported_Blog_Media/Lack-of-Software-to-Test-Access-Controls-Web-Photo.png)
In part 1 of this article series, I postulated that there is a systemic issue related to management override of controls. More concerning than the existence of this issue is that it isn’t being addressed by management or the audit community. This issue is systemic. Let’s discuss what changes we would need to see to correct the current situation.
ERP Risk Advisors is thrilled to announce the addition of TWO new Oracle-specialized courses [1] to our ERP Armor: Learning library. We are now offering unparalleled training in these areas:
Sadly, we see another significant, and successful cyberattack with MGM Resorts being the latest victim. What we understand from the information available, is the breach could have a material impact on the company’s financial results. Additionally, this is the first major corporate breach since the SEC guidance on cyber risk which was published in late July. [See reference article here]
The latest U.S. Securities and Exchange Commission (SEC) guidance on Cyber Security risks have “Cyber” firms buzzing. Those that thought this would be the equivalent of Sarbanes Oxley must have been seriously disappointed. There was no mandatory audit of Cyber risk included.
August 7th, 2023: ERP Risk Advisors, a pioneering risk content company committed to identifying, managing, and mitigating ERP risk, and HALEY Consulting and Advisory Services, a leading provider of innovative solutions ensuring seamless SOX compliance backed by PCAOB standards, proudly announce their strategic collaboration. This dynamic partnership sets the stage for enhanced risk mitigation and content utilization, specifically targeting organizations running Oracle ERP systems.
Dallas, Texas, July 31st, SafePaaS the leading policy-based access governance platform, announces its partnership with ERP Risk Advisors, the leader in risk content and training for ERP systems. This strategic collaboration offers ERP users (including Oracle E-Business Suite, Oracle ERP Cloud, NetSuite and Workday) the most comprehensive and up-to-date automated review of Sensitive Access Risks and Segregation of Duties (SoD) conflicts. This innovative alliance revolutionizes security measures and significantly reduces manual efforts while ensuring compliance with auditing standards.
Written By Fred Roth, CISA, Sr. Adjunct Lecture at ERP Risk Advisors
ERP Risk Advisors is pleased to announce the addition of three new ERP systems to our ERP Armor library. We are now supporting Workday (HCM / Financials), Oracle Clinical One, and Oracle Transportation Management (OTM). These are in addition to the ERP systems we already support: E-Business Suite (Oracle), ERP / HCM Cloud ( Oracle), NetSuite (Oracle), JDE – OneWorld (Oracle), JDE – Enterprise One (Oracle), PeopleSoft (Oracle), Storis, Dynamics, Build Pro, Bottomline, Bill.com, Apriso, Yardi (including Client Central and Rent Café), and Concur. We are also supporting the following tools: OCI, IDCS, Azure, Sailpoint, and CyberArk.