A Segregation of Duties Success
Posted on: February 28, 2018 | By: Andy Vitullo | QAD Financials
Late last year, a client engaged our Logan Consulting team to support their Segregation of Duties (SOD) initiative. This was part of an overall plan to shore up their SOX 404 internal control environment. The primary goal of the engagement was to implement SOD in their QAD 2016EE Environment.
The Logan team executed the following:
- Reviewed and adjusted their role based security model to support SOD.
- Developed a SOD Deployment Strategy.
- Developed and Loaded a SOD matrix. The SOD matrix defines duties that are in conflict and prevents a user access to both of those duties.
- Developed and Loaded a SOD exception policy. The SOD exception policy allows the security administrator to assign a specific user to duties that are in conflict defined in the matrix.
- Developed and Deployed a strategy that prevents the security administrator from circumventing the SOD matrix.
The company’s audit firm reported that the SOX 404 internal control environment has been remediated.
Learn more about SOD within QAD by reading our free article.