• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • HomePage
  • About
  • Syllabus
  • Schedule
    • Monday – Friday Expectations
      • Monday: AM – Introduction
      • Monday: PM – Assertions – Business Process Controls
      • Tuesday: AM – Fraud, P2P Controls
      • Tuesday: PM – OTC Process, Types of Controls
      • Wednesday: AM – Inventory & Shipping Controls
      • Wednesday: PM – Invoicing & Collection Controls
      • Thursday: AM – IT vs. SAP Controls, Security 1
      • Thursday: PM – IT vs. SAP Controls, Security 2 / Change Management
      • Friday: AM – Auditing, Table Security, Risk / Control Framework
      • Friday: PM – Data, SOD/SAT Review
  • Assignments
    • SAP GUI Installation
    • Exercise 1: Procure to Pay
  • Roster / Schedule / Teams

Auditing Controls in ERP Systems - 2019

Auditing Controls in ERP Systems - 2019

Edward N Beaver

Week 7: IT vs. SAP Controls, Security 1, Finance 1 Wrap-up

October 17, 2020 by Edward N Beaver

Continuing great job on the discussions – I appreciate the growth you’ve shown in the quality and substance of the comments. Keep up the good work.   You raised most of the important points but let me summarize my view.

Q1: How does Finance / Accounting manage non-finance people’s tasks that impact them?  Some good comments about cross-training, controls and other ideas.  After working as a non-finance person in processes that impacted financial results significantly, I firmly believe that every person performing a process task needs to know the basic impact of their efforts.  The impact knowledge needs to include at minimum the dimensions of finance / account as well as business results.

Q2: How much Finance  Account should I/T people know?  If you’re and I/T professional who’s job involved applications with any financial content (e.g. ERP systems) I recommend you learn what you can.  As a few or you pointed out – Finance is the language of business and business knowledge is critical to I/T success.  It doesn’t mean you have to have an accounting or financial degree but I encourage I/T folk to be inquisitive and learn what you can.  I particularly like the comment from one of the posts ‘How would IT personnel be able to design and implement solutions if he/she is not familiar with the business function he/she designing the solution for?’

Q3: Financial Controls domestic vs. International companies: just like other processes – differences of language and currencies are the critical differences.  The financial and tax practices of other countries vary considerably and related controls are necessary.  However, that doesn’t mean any less focus on the basic application and process controls.

Q4: Should I/T Professionals supporting general I/T (e.g. workstations, network, etc.) have knowledge of ERP?  There is not reason all IT folks need to know the details of ERP systems.  However, they do need to know the basics of what the systems do, their importance and how the IT work being performed supports the goals of the ERP systems.

In general, always ask questions and be inquisitive about the work you’re doing, especially along the dimensions of a) finance / accounting and b) the ultimate business / outcomes of the organization you’re working in / with.

Exercise 3 (Journal Entries) Due October 27

October 16, 2020 by Edward N Beaver

Reminder:  Exercise 3 – Journal Entries is due (via e-mail) on Thursday October 27  at 11:59 pm.

Week 6 Wrap-up: Invoicing & Collections Controls

October 10, 2020 by Edward N Beaver

(My apologies for being late in updating this post – grading, etc. has been my focus). Continuing great job on the discussions. Keep up the good work.   You raised most of the important points but let me summarize my view.

Q1: If an outside organization – where would attack the OTC process? – You suggested several innovative ways to attack the process.  In the end a decision like this would depend on your motives, what you capabilities where vs. known vulnerabilities.

Q2: Who should care more about collections – Sales or Finance?  Many of you pointed out that sales function often has a conflict of interest in dealing with collections because of their customer focus and loyalty.  Therefore, I believe collections needs to be ‘owned’ by a finance related function.  However, overzealous and callous collections process can erode customer satisfaction considerably.  There needs to be a cooperative relationship between the finance ‘owner’ of collections and the business and sales organizations to assure appropriate collections policies are in place and to work cooperatively with customers who don’t pay well – there needs to be united messages to the customer.

Q3: Controls domestic vs. international:  You pointed out many of the differences in your discussion.  My experience is that currency, import/export regulations, customs authorities and different shipping modes drive the major differences and depending on a company’s business appropriate control differences are also needed.

Q4: Order to Cash (OTC) Process – what keeps you up at night: This depends some on the  nature of the business you’re working with.  Regardless – I recommend keeping focus on value, $$ related segments of the process (e.g. pricing, invoicing, cash collections)

Always when working with the OTC process, make sure you understand the nature and structure of the business.  The OTC process must relate more than other processes to this nature and structure.

Week 7 Questions

October 10, 2020 by Edward N Beaver Leave a Comment

  1. As we’ve seen in the P2P and OTC Processes many different often non-financial business functions are involved with ERP system transactions that post to accounting records. If you are responsible for Finance / Accounting controls for your company how would you manage the risks coming from these non-Financial function jobs?
  2. As we continue to learn about business processes and ERP systems we often discuss financial or account related terms and concepts.  How much finance and accounting knowledge should  IT personnel supporting business applications know and learn?  Explain
  3. Controls are important to financial and accounting processes.  What would be different in the controls of a purely domestic US company vs. an international company?  Give 1 – 2 specific examples.
  4. How important is it for people responsible for general I/T controls (e.g. Network, workstation, Server and data base security) to know about how the ERP system works?  What is one (1) specific thing they should know?

Student: Control Failure Presentation

October 6, 2020 by Edward N Beaver Leave a Comment

Each week as part of our learning, I’ve included at least one Real World control failure example.  Starting in Week 7 (October 17) it will be your turn to continue this learning by contributing your own video presentation of a Real World Control Failure.

You are responsible to:

  • Send me (by e-mail) proposed 2+ alternate weeks when you would like to post your presentation (by October 11).  I’ll prepare a final schedule and publish in the blog’s roster section.
  • Find a real world example of a business process control failure (vs. just a hacking control failure example).
  • Prepare a brief review of the failure.  This PowerPoint (PPT) template contains all the content components / points required in the presentation.
  • In video format, create a presentation of your review / story.  Post that video as a comment to this blog post prior to class time of your week (based on an agreed sign-up schedule).

Note: 5% of the course grade is earned by this project.  Evaluation is based on:

  1. Including the required content components
  2. Clear, concise presentation of the control failure ‘story’ and lessons learned
  3. Originality in presentation of the control failure ‘story’

 

Exam 1: Case

October 5, 2020 by Edward N Beaver Leave a Comment

As discussed several of the questions on Exam 1 relate to this real-world like small business case. You are encouraged to pre-read, print, etc. prior to the Exam.

Exam 1: Take Monday October 9

October 5, 2020 by Edward N Beaver

The first exam of the semester will be conducted by Blackboard (you should see the link when you logon to Blackboard).  The exam is available to take only during the first hour of class on Monday October 9.

Some specifics:

  • Questions relate to course content (on-line and from class) through Week 5 (October 2)
  • Maximum amount of time to complete the exam is 40 minutes
  • Exam is 21 questions (variety of formats i.e. Fill in blank, multiple choice
  • Some of the questions relate to this real-world like small business case.  You are invited to pre-read, print, etc. prior to the exam.

Exercise 2 (OTC) Due October 12

October 3, 2020 by Edward N Beaver

Reminder:  Exercise 2 – Order to Cash Process is due (via e-mail) on Thursday October 12  at 11:59 pm.

Week 5 Wrap-up: Inventory and Shipping Controls

October 3, 2020 by Edward N Beaver

Continuing great job on the discussions.   You raised most of the important points but let me summarize my view.

Q1: Fraud Triangle on ‘One Piece at a Time’ video:  Opportunity – it’s obvious the workers were confident in the opportunity to take various car pieces (one piece at a time); Incentive – a ‘free’ car; Rationalization –  It’s a large company that won’t miss the parts

Q2: For the ‘One Piece at a Time’ video scenario – what should the operations manager do?  You shared some good ideas.  From a risk perspective I would recommend focusing on changes to prevent the large parts from being stolen (how does a transmission leave the plant unnoticed?).  However, some cultural change actions may also be supportive (and needed).

Q3: In shipping – what controls are different in purely domestic vs. international company?  Many differences were noted.  My experience the key differences are currency, languages, different logistics options (e.g. ships), import-export regulations, expanded paperwork requirements, customs authorities are an added interested party.  The added complexity is often outsourced by companies to freight forward and import brokers.

Q4: What are 1-2 less obvious inventory control measures are used with us as consumers?  Are they effective? The anti-theft, anti-shoplifting measures you all mentioned are very common. They seem effective to me.

 

 

Exam 1: Coming up October 9

September 30, 2020 by Edward N Beaver

A reminder that the first exam of the semester will be conducted by Blackboard and must be completed during the beginning of class time.

Some specifics:

  • Will include course content (on-line and from class) through Week 5 (October 2)
  • Test will be conducted via Blackboard – you must complete during the first hour of class time on Monday October 9. (remainder of class will start at 6:30 pm EST)
  • Maximum amount of time to complete the exam is 40 minutes
  • Exam will be approximately 21 questions (variety of formats i.e. Fill in blank, multiple choice
  • Some of the questions relate to a real-world like small business case.  I’ll publish case which you can pre-read, print, etc. Tuesday prior to the exam.
« Previous Page
Next Page »

Primary Sidebar

Weekly Discussions

  • Assignments (11)
  • Exams (7)
  • General (8)
  • Real World Control Failure Presentations (3)
  • Week 01: Introduction (2)
  • Week 02: Business Process; Assertions (4)
  • Week 03: Fraud, P2P Controls (2)
  • Week 04: OTC Process, Types of Controls (3)
  • Week 05: Inventory & Shipping Controls (3)
  • Week 06: Invoicing & Collection Controls (1)
  • Week 07: General IT vs. SAP Controls, Security 1 (2)
  • Week 08: Security 2, Finance 2 (3)
  • Week 09: Security: User Mgmt, Segregation of Duties (2)
  • Week 10: Data; SOD/SAT Review (2)
  • Week 11: Change Management, Development (3)
  • Week 12: Table Security, Control Framework (2)
  • Week 13: SAP Futures, Special System Access (2)
  • Week 14: Character vs. Controls (4)

Copyright © 2025 · Magazine Pro Theme on Genesis Framework · WordPress · Log in