ERP implementation risk

When going with an out-of-the-box ERP solution, implementers are typically not responsible for controls design and testing effectiveness. With an understanding of your framework, specific controls and regulatory requirements, like SOX, FDA and ISO, our job as your risk advisor is to evaluate the controls environment, review design documentation, and identify control objectives and control design activities. We can implement GRC technologies to mitigate segregation of duties risk or build bots to automate controls or test existing automated controls.

When upgrading your ERP system, many companies discover some controls no longer work while others that were nonexistent are now available. Our team can review your regulatory controls framework and existing ERP controls framework, identify optimal controls and validate both the design and configuration of your new control set.

If resources or timeline constraints didn’t allow design controls during implementation or there are unexpected problems after your go-live, we can assess both the design and operating effectiveness of your controls post-go-live. Using our tools, we quickly assess your environment to identify automated or security controls to recommend specific improvements for remediating any control failures.