How to manage exceptional SOD access

January 23rd, 2009

What if you have a small branch office and just one accounting clerk? What if you have year-end closing and need to grant exceptional access to the system?

Remember the master key? The key supervisor hands it out to someone who needs it desperately, and never gets it back. The people who receive these special keys are called superusers. Just like Superman, superusers have superpowers and can do anything.

Superuser access is hard to manage and risky to control, and yet it is sometimes needed. Some users are given carte blanche access, giving them free access to all systems, all objects, all transactions. This is the worst case scenario, because it means that their company has no control over who does what. Read the rest of this entry »

Popularity: 10% [?]

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • Slashdot
  • StumbleUpon
  • Reddit

COSO five main elements

January 18th, 2009

1. Control environment:

The foundation for all other elements, influencing the control consciousness of the people within the organization and encompassing every aspect of how the organization is structured and works.
(Translation: This is the big picture. If your control environment is healthy and is already functioning well, then sowing the seeds of compliance will be straightforward. If your control environment is sick and needs help, you are probably looking at a big change management project.)

2. Risk assessment:

The identification and analysis of risks to the achievement of the organization’s business objectives.
(Translation: In order to know your business, you need to know your risks and know them well.)

3. Control activities:

The policies and procedures that help the board and management ensure that their control decisions are carried out in relation to identified risks.
(Translation: You’ve identified your risks, your control environment is good, and now you need to set up the policies and procedures that will help senior executives make their decisions.) Read the rest of this entry »

Popularity: 9% [?]

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • Slashdot
  • StumbleUpon
  • Reddit

Top 5 benefits of good corporate governance

January 18th, 2009

1. Increased shareholder value:

A properly functioning and documented governing framework can provide corporate leaders with an increased sense of security as they reflect on the efforts they are making toward managing compliance and risk issues. Governance can also provide reassurance to those outside of the company by demonstrating the organization’s capacity for understanding the need to manage risk and compliance issues as well as its ability to institute a functioning GRC system. The result can be measured in the strengthening of the company’s brand and reputation, which translates into stronger shareholder value.

2. Lower overall costs:

A unified and holistic approach to GRC also helps to lower the overall yearly costs to managing a company’s risk and compliance activities. For example, a GRC approach increases efficiency, allowing a company to reduce the number of people dedicated to this function and the number of hours required to carry out risk and compliance duties.

3. Improved financial performance:

A strong governing framework facilitates transparency, giving company leaders a logical and structured process Read the rest of this entry »

Popularity: 6% [?]

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • Slashdot
  • StumbleUpon
  • Reddit

SAP GRC Process Control checklist

January 18th, 2009

1. Document the control environment.
What are you doing? What are your processes? Where are the risks?

2. Test: Implement the process and access controls needed to address the risks identified.

3. Remediate: Resolve exceptions found by the controls.

4. Analyze: Use the information gathered to gain a deeper understanding of the business.

5. Optimize: Improve both GRC and business processes as insights are gathered.

Popularity: 23% [?]

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • Slashdot
  • StumbleUpon
  • Reddit

Download ASAP Accelerated SAP Project Implementation Checklist

December 15th, 2008


Download ASAP Accelerated SAP Project Implementation Checklist

ASAP (Accelerated SAP) project implementation cover several phase such as:
Phase 1: Project Preparation
Phase 2: Business Blueprint
Phase 3: Realization
Phase 4: Final Preparation
Phase 5: Go-Live and Support
below detail checklist and step by step for ASAP implementation

Download

Popularity: 73% [?]

Share and Enjoy: These icons link to social bookmarking sites where readers can share and discover new web pages.
  • Digg
  • del.icio.us
  • Facebook
  • Google
  • Slashdot
  • StumbleUpon
  • Reddit