Below you'll find a list of all posts that have been categorized as “Best Practices”
Conducting access reviews in ERP environments involves a series of well-defined steps aimed at ensuring that access rights are appropriate and aligned with organizational policies. Understanding these steps can help organizations implement a robust access review process. Step-by-Step Process Planning and Preparation: The first step is to plan the access review process. This involves defining the scope, objectives, and timeline …
Access reviews are a systematic process aimed at ensuring that only authorized personnel have access to specific data and functionalities within an ERP system. Understanding what access reviews typically entail can help organizations implement them more effectively. Key Components of Access Reviews User Identification: The first step in an access review is identifying all users who have access to the …
Enterprise Resource Planning (ERP) systems are the backbone of many organizations, integrating various functions such as finance, human resources, supply chain, and customer relationship management into a single cohesive system. Given the critical nature of these systems, ensuring that only authorized personnel have access to sensitive data and functionalities is paramount. This is where access reviews come into play. Why …
Practical Case: Access Management in five steps ERP ecosystems play a critical role in the success of companies, in many industries and in many countries. Supply chains depend on the integrity and availability of these systems. Company reputation easily can be damaged by fraudulent activities in these increasingly complex IT environments. To ensure integrity, companies typically apply controls – measures …
Integration = Efficiency ERP systems have been around for a long time. And for a good reason. The out-of-the-box integrations within an ERP system allow companies to reach high levels of efficiency. Integration of the sales, planning, purchasing, production, delivery and accounts receivable processes is not only very effective in an integrated environment, it also diminishes the probability of human …
After go-live, there will be situations for users not being able to perform their job because they don’t have the required authorizations. If this happens, at least it is a sign that authorizations were not given too generous. Nevertheless, these issues are to be resolved. Understandably, users tend to take a short-cut, to get the required authorizations as soon as …
In addition to the operational process to identify conflicts, it is necessary to periodically review the underlying elements. This is mainly about the roles and the controls. A role review can take place on two levels. Assess whether the role only provides access to the necessary application components Assess whether the employees are linked to the right role(s). The first …
Large companies often arise from various acquisitions and mergers with other companies. Every acquired company typically has its own ERP environment, which cannot simply be replaced. That is why these companies often have multiple ERP systems. However, when processes are integrated, employees may have access to multiple ERP systems to perform their duties. If we look at the applications that …
Evaluating Conflicts can be an overwhelming task. In a previous blog “First things first” is explained how to prioritize conflicts, to make it manageable. Now, we assume the list of conflicts can be meaningfully categorized, filtered and assigned to the corresponding role- and risk owners. From there, these owners can investigate the conflict and decide how to resolve the conflict. …
Many companies have spent a considerable amount of effort to create the required business rules to identify conflicts. This task is complicated for different reasons: It requires an integrative and detailed knowledge of the full ERP application. Typically, knowledge of the ERP application is dispersed in different areas of expertise, with different people. To achieve consistency, strong coordination is required. …
