• Log In
  • Skip to primary navigation
  • Skip to main content
  • Skip to primary sidebar
  • HomePage
  • About
  • Syllabus
  • Schedule
    • Monday – Friday Expectations
      • Monday: AM – Introduction
      • Monday: PM – Assertions – Business Process Controls
      • Tuesday: AM – Fraud, P2P Controls
      • Tuesday: PM – OTC Process, Types of Controls
      • Wednesday: AM – Inventory & Shipping Controls
      • Wednesday: PM – Invoicing & Collection Controls
      • Thursday: AM – IT vs. SAP Controls, Security 1
      • Thursday: PM – IT vs. SAP Controls, Security 2 / Change Management
      • Friday: AM – Auditing, Table Security, Risk / Control Framework
      • Friday: PM – Data, SOD/SAT Review
  • Assignments
    • SAP GUI Installation
    • Exercise 1: Procure to Pay
  • Roster / Schedule / Teams

Auditing Controls in ERP Systems - 2019

Auditing Controls in ERP Systems - 2019

Tuesday: AM – Fraud, P2P Controls

Watch these videos:

  • Real World Control Failure: ACL Technologies and Egypt Air Force
  • Lecture about Risk & Fraud

Read the following in textbook Auditing and GRC Automation in SAP (AGAS) by Chuprunov, Maxim

  • AGAS Chapter 9.1 thru 9.3 (Controls in P2P Process)
  • AGAS Chapter 12.1 (Introduction to Fraud)

Review the lecture slides and notes for Fraud, P2P Controls

Review the lecture slides and notes for Fraud b

Video: Procure-To-Pay [P2P] – A Practical Understanding

Video: Webinar Integrating Governance, Risk Management and Compliance

Daily Discussion Questions:

  1. Have you ever:
    Been victim of Fraud?
    Had evidence of, suspicions of fraud occurring?
    Been pressured (e.g. by an employer) to commit an act that was morally or legally questionable?
    – Explain
  2. Which portion / step of the Procure to Pay process do they see as the most vulnerable to theft, fraud or failure of some kind? Explain

Finalize: Real World Control Failure Assignments

WorldCom Organization

  • Corporate Shared Services
  • 4 Divisions:
    • North America [including: Canada], South America
    • Asia/Pacific
    • Eastern/Western Europe
    • Africa
  • Role of:
    • Board of Directors
    • Audit Committee
    • Internal Audit
      • Technology
      • Financial
      • Operational
    • External Audit [Arthur Anderson]
    • C-Level Suite [i.e. CEO, CFO, CIO, COO, etc.]
  • Big 4 [EY, PwC, KPMG, D&T] Services Rendered:
    • Audit Assurance
    • Taxes
    • Legal
    • Actuarial Services
    • Information Security
      • Due to Enron / WorldCom Big 4 cannot cross-sell
    • Corporate Fiduciary Responsibility
      • Role of Compliance / Operational Risk
      • Role of Audit
      • Role of General Counsel [Legal]
      • Todays Role of C-Level Suite
        • Post Sarbanes-Oxley, CIO signs off on Annual Report

Primary Sidebar

Weekly Discussions

  • Assignments (11)
  • Exams (7)
  • General (8)
  • Real World Control Failure Presentations (3)
  • Week 01: Introduction (2)
  • Week 02: Business Process; Assertions (4)
  • Week 03: Fraud, P2P Controls (2)
  • Week 04: OTC Process, Types of Controls (3)
  • Week 05: Inventory & Shipping Controls (3)
  • Week 06: Invoicing & Collection Controls (1)
  • Week 07: General IT vs. SAP Controls, Security 1 (2)
  • Week 08: Security 2, Finance 2 (3)
  • Week 09: Security: User Mgmt, Segregation of Duties (2)
  • Week 10: Data; SOD/SAT Review (2)
  • Week 11: Change Management, Development (3)
  • Week 12: Table Security, Control Framework (2)
  • Week 13: SAP Futures, Special System Access (2)
  • Week 14: Character vs. Controls (4)

Copyright © 2025 · Magazine Pro Theme on Genesis Framework · WordPress · Log in