Upgrading critical financial systems can be a daunting task, especially when ensuring compliance with regulatory requirements and safeguarding data integrity. This report dives into the challenges and opportunities associated with transitioning to the latest version of an enterprise resource planning (ERP) system. It explores how organizations can navigate risks, enhance IT governance, and fortify internal controls during the upgrade process. Key observations reveal gaps in processes such as application development lifecycle management, security configurations, database administration and IT segregation of duties.

These areas are crucial for maintaining operational efficiency while adhering to Sarbanes-Oxley control objectives. Addressing these vulnerabilities helps companies mitigate risks and unlock the full potential of their ERP systems. This resource is designed to inspire action by presenting practical strategies for streamlining upgrades, optimizing security protocols, and validating controls to ensure seamless transitions. Whether you’re preparing for an upgrade or seeking ways to improve your current system, this guide offers valuable insights to help you achieve success.

Audit findings in this report include:

• Test scripts contain step-by-step instructions for navigation, but detailed test execution steps, expected results, pass/fail criteria, and a process to capture actual results were not evident.
• Access to critical functions such as posting journal entries, posting cash receipts, modifying sets of books/charts of accounts, and creating GL accounts was not appropriately restricted.
• Passwords are not forced to be a minimum of eight characters in length and are not required to meet defined complexity requirements.
• Lockouts are not enforced after three or five failed account access attempts.