Risk Assessment Program/Checklist for Enterprise Resource Planning Systems & Applications [$35.00]

risk assessment for erp
audit treasury management system
audit of ismst

Terms and Conditions

Enterprise resource planning (ERP) system is fundamentally an integrated business management system used to manage multiple front-office and back-office functions such as inventory, supply chain, purchases, finance & accounts (payables & receivable), human resources, risk management, customer relationship management, production management, sale & marketing, among other functions. Newer ERP have inbuilt enterprise performance management module which can be used to plan, budget, predict and report on the organization’s financial and business performance, thereby serving as a single source of truth for the organization. The ERP system integrates multiple business processes and enable the flow of organizational data across the different business process (categorized in modules) such that will enable easy processing of transactions and decision-making process. ERP runs a single database while organizational data are accessed through workflows built into the system.

Given the critically of the enterprise resource planning application as the single source of truth in an organization, the confidentiality, integrity and availability of business data in the system cannot be overemphasized as such, it behooves on IT risk/control analyst and other assurance practitioners to ensure the security, integrity and availability of the system for business processing at all time. For effective audit of the ERP application, it is important for IS Auditors, IT Risk & Control Analyst and other IT Assurance professionals to develop a robust and comprehensive risk assessment programs that can be used to validate operational, regulatory and business controls to protect the system from the risk of confidentiality, integrity and availability.

core banking app

This eBook was put together to close identified knowledge/skill gaps in the security risk assessment of enterprise resource planning (ERP) application by IT Assurance professionals. As a risk assessment program/checklist, the book provides a step by step do-it-yourself guide on how to assess the control implemented in ERP system to ascertain their adequacy while outlining test procedures to be performed to assure the adequacy and effectiveness of technical, operational controls in and around the ERP system and the various business/back office functions. This book serves for use in auditing and security assessment of some of the popular ERP applications such as SAP, SAGE, Oracle People Soft, JD Edwards, Microsoft Dynamics ERP, etc., given similarities in their architecture. The following areas of the ERP system and operational processes were covered.

  • Logical access management (user access management)
  • Separation of duties (workflow management and maker/checker controls)
  • Policies, procedures and guidelines on ERP systems
  • Application security
  • Risk and controls issues around ERP applications
  • Vendor/third party services and service level agreements.s
  • Application security
  • Database security
  • Operating system security
  • Business continuity & Disaster recovery
  • Change and release management
  • Backup and restore controls

Intended for organizations desirous of building requirement for the acquisition of its enterprise resource planning applications for value add. IS/IT auditors, System control & IT risk analyst will find this book very useful for continuous review of their ERP system and ensuring that the system remain secure and relevant for the business function. Below is a sample page of the ERP system audit checklist/program. For full access to the document, you can subscribe to our membership plan or purchase the book by click the Add to Cart button above.

Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.


IT Audit, IT Risk and Cyber Security eBooks By Nwabueze Ohia



Announcement: Our Book "Auditing Your Information Systems and IT Infrastructure" made it to the Best Database Auditing Books of All Time Ranking By BookAuthority

The best Database Auditing books of all time

Auditing Your Information Systems and IT infrastructure: Practical Audit Programs/Checklists for Internal AuditorsGet Now
IT Infrastructure Risk & Vulnerability Library: A Consolidated Register of Operational & Technology Infrastructure Vulnerabilities for IT Assurance ProfessionalsGet Now
Auditing Your Payment Cards Processes, Systems and Applications: A Step By Step PCIDSS Compliance Audit Program For Brands, Issuers, Acquirers, ProcessorsGet Now
Auditing Your Windows Infrastructure, Intranet And Internet Security: A Practical Audit Program for Assurance ProfessionalsGet Now
Customer Reviews System (WIDGET PACK)
Star Rating (WIDGET PACK)