Infogix White Paper
As more and more companies migrate portions of their information technology portfolio into Enterprise Resource Planning (ERP) software application suites such as SAP, the question of how
best to implement automated controls over the information and processes embodied by the ERP module(s) requires careful consideration. This paper explores several critical factors that must be
evaluated in order to construct a control framework that will satisfy current and future company, audit, governance, compliance, and regulatory requirements.
Control systems that are built-in or embedded within these software systems are inherently deficient. This paper discusses these weaknesses while recommending control aspects, characteristics, types, and capabilities that information intensive businesses will want to specify as they design and implement enterprise control systems.
Control capabilities within specific ERP modules are important. Balancing and reconciling the module’s input against its output can provide vital exceptions that should be dealt with in a timely manner. Balancing and reconciling information within the module against other
disparate sources outside the module are problematic for built-in controls.