• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • HomePage
  • About
  • Structure
  • Schedule
    • First Half of the Semester
      • Week 1: Introduction
      • Week 2: Business Process; Assertions
      • Week 3: Fraud, P2P Controls
      • Week 4: OTC Process, Types of Controls
      • Week 5: Inventory & Shipping Controls
      • Week 6: Invoicing & Collection Controls
      • Week 7: IT vs. SAP Controls, Security 1
    • Second Half of the Semester
      • Week 8: Security: Roles, Finance Process & Controls
      • Week 9: Security: User Management, Segregation of Duties
      • Week 10: Data, SOD/SAT Review
      • Week 11: Change Management, Development
      • Week 12: Auditing, Table Security, Risk / Control Framework
      • Week 13: SAP Futures, Special System Access (updated Nov 30)
      • Week 14: Character vs. Controls
  • Assignments
    • Exercise 1: Procure to Pay
    • Exercise 2: Order to Cash
    • Exercise 3: Journal Entries
    • Exercise 4: Segregation of Duties (SOD)
    • Final Exercise: Risk-Controls Framework
    • Extra Credit Assignment
  • Roster / Schedule / Teams
  • Webex
  • Gradebook

Auditing Controls in ERP Systems

ERP Systems

Week 10: Data; SOD/SAT Review

Week 10: Data, SOD/SAT Review Wrap-up

November 11, 2016 by Edward N Beaver

Continuing great job on the discussions. Keep up the good work.   You raised most of the important points but let me summarize my view.

Q1: How to assure master data integration works well for all?  This is hard with ERP systems because master data is used so extensively across so many transactions, processes, etc.  Company needs to have a good plan, lots of well defined processes and controls.  It’s important that there is a broad understanding of master data and appreciation for good data.  This comes only with good training and strong management focus.

Q2: Who should play the key role in defining and assuring quality of master data?  All processes who use the data, not just the main users need a say in what the master data is (definitions, processes, etc.).  Because of the high degree of integration across business processes in ERP systems those in charge of master data need integration/ broad perspectives.   Accounting / finance is one critical voice but in my experience not the best to be in charge.  A strong financial focus can be just as bad as another groups focus (e.g. sales, supply chain, etc.)
My experience is there needs to be a defined master data coordinator (data steward is term many of you used – great term).  Great, cooperative master data coordinators and new Master Data Management (MDM) software are becoming a must for strong ERP system users.

Q3: What is riskier: inaccurate data or excessively repetitive data?  Both are bad.  You all gave some great examples.   I agree that inaccurate data causing problems is more common than repetitive, but be aware of both.

Q4: Which transaction is most ‘Sensitive’?  Many, many transactions are sensitive – no correct answer.  The rule of thumb I used is that any transaction that creates master data or creates or can lead to creation of a financial transaction is sensitive.  Note that many systems and configuration transactions are sensitive and need to be locked down in production.

A good ERP systems runs on good master data.

This coming week we will look change management and development aspects of ERP systems.

Week 10 Questions

November 1, 2016 by Edward N Beaver 138 Comments

  1. Master data in an ERP system is highly integrated with various processes and effects many parts of the organization.  How does an organization assure this integration works well for all?
  2. Which department or person should play the key role in defining master data and assuring it’s quality?
  3. Which is more of a risk to a company: inaccurate data or excessive repetitive data?  Explain
  4. Which transaction do you believe is the most ‘Sensitive’ and therefore should have extra focus in an SAT (Sensitive Access to Transaction) audit?  Explain

Primary Sidebar

Weekly Discussions

  • Assignments (11)
  • Exams (5)
  • General (6)
  • Real World Control Failure Presentations (27)
  • Week 01: Introduction (4)
  • Week 02: Business Process; Assertions (4)
  • Week 03: Fraud, P2P Controls (2)
  • Week 04: OTC Process, Types of Controls (3)
  • Week 05: Inventory & Shipping Controls (3)
  • Week 06: Invoicing & Collection Controls (1)
  • Week 07: General IT vs. SAP Controls, Security 1 (3)
  • Week 08: Security 2, Finance 2 (2)
  • Week 09: Security: User Mgmt, Segregation of Duties (2)
  • Week 10: Data; SOD/SAT Review (2)
  • Week 11: Change Management, Development (3)
  • Week 12: Table Security, Control Framework (2)
  • Week 13: SAP Futures, Special System Access (2)
  • Week 14: Character vs. Controls (4)

Copyright © 2025 · Magazine Pro Theme on Genesis Framework · WordPress · Log in