GDPR/POPIA and ERP Access: Privacy as a Legal Requirement
When we think about Segregation of Duties (SoD) and internal controls, the focus is almost exclusively on money: stopping fraud,...
Payroll Fraud 101: The Dangers of Combined HR and Financial Access
For most businesses, payroll represents the single largest operational expense. Because payroll runs are frequent, highly automated, and massive in...
ESG and GRC: Why Sustainability is the New “Section 404”
For years, Environmental, Social, and Governance (ESG) reporting was viewed largely as a corporate communications exercise. Sustainability reports were glossy...
Inventory Shrinkage & The Warehouse Manager: The Hidden Cost of Bad SoD
Inventory shrinkage—the loss of products between the point of manufacture and the point of sale—is often written off as the...
The Psychology of Fraud: Why Good Employees Make Bad Decisions
When a corporate fraud scheme is uncovered, the reaction is almost always the same: “I can’t believe it was them. They’ve...
Creating a “Culture of Compliance”: Strategies for Making It Everyone’s Responsibility
In many organizations, the compliance department is seen as the internal police—a group that slows down business and enforces rigid...
The “Ghost Vendor” Scam: How Weak Segregation of Duties Funds Corporate Fraud
When we think of corporate theft, we often picture sophisticated cyberattacks or dramatic embezzlement schemes. However, the reality is usually...
“But I need that access to do my job!”: How to Handle Pushback When Restricting Access Rights
If you work in IT security, compliance, or internal audit, you have undoubtedly heard this phrase. You analyze an ERP...
SoD in the Age of Cloud ERP: Does the Cloud Simplify or Complicate Segregation of Duties?
The cloud has transformed how we deploy, scale, and maintain enterprise software. For many organizations, migrating ERP systems like Infor...