ARMI - KN

All organizations running ERP Cloud should be concerned about fraud.  The Association of Certified Fraud Examiners’ 2018 Report to the Nation identifies that 89% of fraud is misappropriation of assets such as fraudulent disbursements.  Check and payment tampering represent 12% of all fraud and averages $150,000 per incident.  Lack of internal controls, override of existing controls, or lack of management review represents 69% of asset misappropriate fraud cases.  Fraud is committed by Managers and Staff Employees in 78% of cases. 

Greeley, Colorado, April 9, 2020 – The heart of ERP Armor is the identification and management of risk in a customer’s ERP Solution. ERP Armor blends a proven ERP Risk Architecture with ERP Risk Content developed over 20 years. In 2019 we introduced ERP Armor as a set of rules, Segregation of Duties and Sensitive Access, for assessing risk in an ERP system. We now refer to them as ERP Armor: Rules and today we are introducing ERP Armor: Roles. The Rules and Roles are licensed separately.

Last week I wrote a blog talking about how the System Implementation industry is biased against a “Complete and Secure” implementation.  This week I’d like to address another elephant in the room – institutional bias in the External Audit community.

The SI industry is stacked against a ‘complete and secure’ ERP implementation? SIs don’t win bids by providing a scope that includes controls and role design. Very little, if any, customization of roles is included in the implementation project plan. Often controls design only happens around the time of UAT, leaving too little time to change business processes if they need to be changed to support controls. After going live, organizations are left with these challenges:

Greeley, Colorado, April 2, 2020 – ERP Risk Advisors, a practical thought leader for managing ERP Risk, providing content and consulting services related to compliance, security, risk management, and controls, today introduces ERP Armor^TM   as a Service – an approach to managed services using ERP Armor.

We have recently been sharing our thoughts on LinkedIn on the challenges with Oracle ERP Cloud role design. The majority of implementations go live with purely seeded roles. There is an assumption that seeded roles have been designed with Security and Compliance in mind, which is not the case.  We have learned it is best not to assume things. That is why we offer a strong Assessment phase before we design or re-design roles in ERP Cloud. The following is a list of reasons you will need to move from seeded to custom roles:

Our mission here at the Advanced Regenerative Medicine Institute is to provide top-notch training to any clinicians looking to learn how to safely and effectively perform regenerative medicine procedures. We teach both stem cell and PRP therapies for sports, orthopedic, and aesthetic medicine.

At the time this post was written, training camp was well underway for both professional and college football. As expected, injury stories are starting to pop up all over the country. The Seattle Seahawks are just one of many teams reporting injuries to key players. Some of those players are turning to PRP injections to get back on the field.

Our primary mission here at the Advanced Regenerative Medicine Institute is to equip clinicians to offer stem cell and PRP therapies in their practices. We believe in the value of regenerative medicine as an alternative to more traditional methodologies. Regenerative medicine offers tremendous potential; potential we are still learning about.