Vu Do

2. The ERP systems market is very competitive. What should SAP and other ERP systems providers be focusing on to make their systems more competitive in the future?

I think ERP system providers should focus on making user interfaces more user friendly and security for the system. Employees using the system would want things to be easily…[Read more]

4. What aspect of compliance should an organization put the most effort into ensuring their controls are adequate? What factors about an organization (it’s industry, profit / non-profit, international, …) would drive this answer?

The compliance that an organization should put the most effort into ensuring that their controls are adequate rel…[Read more]

Great example, SOD is a definite benefit for an organization to mitigate the risk of an employee committing fraud. That control will help eliminate risk by making sure one employee doesn’t have access to another step within the chain of commands since if they did, they will be able to alter the information for their own benefits. Your example…[Read more]

Abhay, good point you have to understand the technology within an organization to produce an accurate audit. What happen if you do not know how to use the programs in the company, that will cause issues when you’re in the process of the audit. You must know what system the organization is using and then you can like you said deploy appropriate…[Read more]

Sean I can see that happening a lot, personnel would want to charge their phone or watch shows with flash drive and if they do not have a laptop of their own. They would turn to using the military computers. Another issue I could see happening is if they access their personal email and click on something that contain malware and that could infect…[Read more]

Great points Daniel, the flash drive not being secured or place inside a bag was an issue I thought could be avoided easily but as the video showed it can happen. The employee was not cautious as you said about putting it in a secure location. Then the employee left the laptop in the car where anyone can view it so a thief can see it and steal it…[Read more]

Great points Said, internal auditors should not be involved with the procedures since they will be the ones conducting the audit on them. They must be independent of what they could be auditing so they can remain biased when making decisions. They must not report to management for that reason to since that could influence their judgment, so…[Read more]

Daniel, number 3 response makes sense, internal auditors must maintain their independence when conducting an audit. They must not have any self interest in what they are auditing and must have a clear mind to be focus. The decision they make has to be un-biased like you said and that will help them conduct a good audit.

1. Have you ever been involved with an internal audit or audit of your process / project? Briefly describe.

I have not been involved with an internal audit process but could imagine what it would be like. While working as an App Developer, I was assign Customer request projects and had a deadline with an amount of paid hours to complete it. I…[Read more]

2. How is independence maintained when working for the company as an internal auditor?

Independence I would imagine is maintained by doing your work on projects independently and when you are confuse about something, reach out to a person that can help out. But mostly you have to keep your project to yourself since you are the internal auditor…[Read more]

4. In future weeks we may have the privilege of having real world auditors join us for our discussions. What questions would you like to ask the Auditors to answer for us?

• What is it like in the day of an Auditor?
• What are the common issues you face on a day to day basis?
• What is a typical or common job assign to an Audit…[Read more]

2. In your company, do you use any blueprints as documentation? Why are process blueprints important in the documentation?

Yes blueprints are very import with documentation since it gives detail instruction of what happen and what changes where put in to get to the end results. Management or whoever looks at the document will know exactly what…[Read more]

3. How have you seen change management work in your organization? What improvement recommendations do you have?

While working at Highmark BlueCross BlueShield, my management team changed 2 months before I left and it was that reason I left. I was working as an Associate Application Developer and my old management team was located at my job…[Read more]

Daniel, payment transaction is very important and is the most Sensitive since it is how the organization received money. Everything has to be done correctly or else the company does not received money. It is the most looked upon for fraud since someone can change the information and have the money inserted towards their bank account or a different…[Read more]

Yulun, financial department does play an important role to the overall company indeed, they are responsible for entering in sensitive information about customers and employees. If anything is entered wrong, then it could cause issue so they must be well equip to entering in the correct information to the right place. So they play a huge role in…[Read more]

3. Which is more of a risk to a company: inaccurate data or excessive repetitive data? Explain

Inaccurate data is more of a risk for a company since the information is wrong and could affect projects that are using that information. If this happens then it will cause more problems for the company and have a negative effect if information about…[Read more]

1. Master data in an ERP system is highly integrated with various processes and effects many parts of the organization. How does an organization assure this integration works well for all?

Master data holds the most important part of information for data users and with it, lots of employees use it to work with everyday. The organization must…[Read more]

2. Security in an ERP system (e.g. SAP) is complex. What is the most fuzzy, difficult to understand component? Explain

Permission component, users must have the required access control to access certain parts of the system and to submit materials. You could be working on something and then at the end realized you do not the required…[Read more]

3. What key (1-2) competencies does the person responsible in a company for security (e.g. for a given process) need to have to be successful? Why?

They have to have an understanding and correct thinking to be good at security for say approving users security access. They must know what they are doing and know that the certain user requesting…[Read more]

4. All companies are dynamic entities with employees and others using systems coming and going all the time. What best practices have you experienced or would you recommend for managing system users and their related security access?

While working as an Associate Application Developer for Highmark BlueCross BlueShield for a little over a year,…[Read more]