Challenge
After an ERP go-live, the audit committee wanted assurance that financial and procurement controls still worked. Users had broad access, and there were no checks for segregation of duties.
What we did
- Agreed a risk-based audit plan with the audit committee, covering procure-to-pay, inventory and finance processes.
- Reviewed roles, user access and segregation-of-duties conflicts in the ERP.
- Tested control design and operating effectiveness, and reported findings with root causes.
- Set up an action-closure tracker and a regular audit committee pack.
Outcome
Access conflicts were identified and remediated, process owners accepted clear actions, and the audit committee gained a reliable way to track closure.
Client names and identifying details are withheld to protect confidentiality.
All case studies