Enterprise resource planning (ERP) system is fundamentally an integrated business management system used to manage multiple front-office and back-office functions such as inventory, supply chain, purchases, finance & accounts (payables & receivable), human resources, risk management, customer relationship management, production management, sale & marketing, among other functions. Newer ERP have inbuilt enterprise performance management module which can be used to plan, budget, predict and report on the organization’s financial and business performance, thereby serving as a single source of truth for the organization. The ERP system integrates multiple business processes and enable the flow of organizational data across the different business process (categorized in modules) such that will enable easy processing of transactions and decision-making process. ERP runs a single database while organizational data are accessed through workflows built into the system.
Given the critically of the enterprise resource planning application as the single source of truth in an organization, the confidentiality, integrity and availability of business data in the system cannot be overemphasized as such, it behooves on IT risk/control analyst and other assurance practitioners to ensure the security, integrity and availability of the system for business processing at all time. For effective audit of the ERP application, it is important for IS Auditors, IT Risk & Control Analyst and other IT Assurance professionals to develop a robust and comprehensive risk assessment programs that can be used to validate operational, regulatory and business controls to protect the system from the risk of confidentiality, integrity and availability.
This eBook was put together to close identified knowledge/skill gaps in the security risk assessment of enterprise resource planning (ERP) application by IT Assurance professionals. As a risk assessment program/checklist, the book provides a step by step do-it-yourself guide on how to assess the control implemented in ERP system to ascertain their adequacy while outlining test procedures to be performed to assure the adequacy and effectiveness of technical, operational controls in and around the ERP system and the various business/back office functions. This book serves for use in auditing and security assessment of some of the popular ERP applications such as SAP, SAGE, Oracle People Soft, JD Edwards, Microsoft Dynamics ERP, etc., given similarities in their architecture. The following areas of the ERP system and operational processes were covered.
Intended for organizations desirous of building requirement for the acquisition of its enterprise resource planning applications for value add. IS/IT auditors, System control & IT risk analyst will find this book very useful for continuous review of their ERP system and ensuring that the system remain secure and relevant for the business function. Below is a sample page of the ERP system audit checklist/program. For full access to the document, you can subscribe to our membership plan or purchase the book by click the Add to Cart button above.
Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.