Security Manager Controls

SOD

The SOD module provides a key GRC capability to pro-actively detect, review, remediate and approve SOD violations in access requested initially or in conjunction with current access. Saviynt provides the ability to house multiple SOD and Critical Access rule sets for component systems for violations within an application or across many applications. It also provides ability to simulate ‘what if’ scenarios to add/change/delete access to visualize SOD impact prior to raising a request. Additionally, Saviynt’s SOD module provides summary, detailed reports on users/roles and usage based SOD reporting

The following SOD related controls are organized by Control Type You can also “Jump To” Control Types and Categories by clicking on the link located at the right of this screen.

The following are links to more detailed pages:

JD Edwards

Showing 90 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of Duties Critical
Approve Invoices conflicts with Payables Invoices Segregation of Duties High
Approve Invoices conflicts with Payables Payments Segregation of Duties High
Bank Reconciliations conflicts with Payables Invoices Segregation of Duties High
Bank Reconciliations conflicts with Payables Payments Segregation of Duties High
Bank Reconciliations conflicts with Receivables Receipts Segregation of Duties High
Create Requisition conflicts with Create Items Segregation of Duties Medium
Create Requisition conflicts with Create Suppliers Segregation of Duties High
Create Requisition conflicts with Enter Purchase Order Release Segregation of Duties Medium
Create Requisition conflicts with Payables Invoices Segregation of Duties Medium
Create Requisition conflicts with Payables Payments Segregation of Duties High
Create Requisition conflicts with Purchase Orders Segregation of Duties Medium
Create Sales Order conflicts with Receivables Transactions Segregation of Duties High
Create Suppliers conflicts with Approve Invoices Segregation of Duties High
Create Suppliers conflicts with Enter Purchase Order Release Segregation of Duties High
Create Suppliers conflicts with Payables Invoices Segregation of Duties High
Create Suppliers conflicts with Payables Payments Segregation of Duties High
Create Suppliers conflicts with Purchase Orders Segregation of Duties High
Create Suppliers – Critical Access Least Privilege, Segregation of Duties High
Customer Account Maintenance conflicts with Create Sales Order Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Customer Account Maintenance conflicts with Release Sales Order Segregation of Duties High
Customer Account Maintenance conflicts with Remittances Segregation of Duties High
Enter Journal Entry conflicts with Approve Invoices Segregation of Duties High
Enter Journal Entry conflicts with Create Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Enter Customer Receipts Segregation of Duties High
Enter Journal Entry conflicts with General Ledger Set Up Segregation of Duties High
Enter Journal Entry conflicts with Payables Invoices Segregation of Duties High
Enter Journal Entry conflicts with Payables Payments Segregation of Duties High
Enter Journal Entry conflicts with Post Journal Entry Segregation of Duties High
Enter Journal Entry conflicts with Purchase Orders Segregation of Duties High
Enter Journal Entry conflicts with Release Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Remittances Segregation of Duties High
Enter Purchase Order Release conflicts with Approval Authorization Control Segregation of Duties High
Enter Purchase Order Release conflicts with Approve Invoices Segregation of Duties High
Enter Purchase Order Release conflicts with Payables Invoices Segregation of Duties High
Enter Purchase Order Release conflicts with Purchase Orders Segregation of Duties High
Enter Purchase Order Release conflicts with Receive Goods and Services Segregation of Duties High
General Ledger Periods conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Post Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Receivables Receipts Segregation of Duties High
General Ledger Setup conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Setup conflicts with Mass Allocate Journal Entries Segregation of Duties High
Limit access that create Segregation of Duties risk IT General Controls, Least Privilege High
Limit access to critical JD Edwards applications and reports Least Privilege High
Limit user accounts having access to super-user type functionality Least Privilege High
Mass Allocate Journal Entries conflicts with Enter Journal Entry Segregation of Duties High
Modify Bank Information conflicts with Item Price List Segregation of Duties High
Monitor accounts with access to dev, test and production environments Identity Governance High
Monitor accounts with access to PCI relevant data Data Controls High
Monitor accounts with access to PHI or PII relevant data Data Controls High
Monitor accounts with access to SOX critical applications Least Privilege High
Payables Invoices conflicts with Payables Payments Segregation of Duties High
Payables Invoices conflicts with Payables Setup Segregation of Duties High
Payables Invoices conflicts with Purchase Orders Segregation of Duties High
Payables Payments conflicts with Purchase Orders Segregation of Duties High
Payables Setup conflicts with Payables Payments Segregation of Duties High
Payables Setup – Critical Access Least Privilege, Segregation of Duties High
Post Journal Entry conflicts with Approve Invoices Segregation of Duties High
Post Journal Entry conflicts with Create Sales Order Segregation of Duties High
Post Journal Entry conflicts with Enter Customer Receipts Segregation of Duties High
Post Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Post Journal Entry conflicts with Payables Invoices Segregation of Duties High
Post Journal Entry conflicts with Payables Payments Segregation of Duties High
Post Journal Entry conflicts with Purchase Orders Segregation of Duties High
Post Journal Entry conflicts with Release Sales Order Segregation of Duties High
Post Journal Entry conflicts with Remittances Segregation of Duties High
Purchase Orders conflicts with Approval Authorization Control Segregation of Duties High
Purchase Orders conflicts with Approve Invoices Segregation of Duties High
Purchase Orders conflicts with Enter Purchase Order Release Segregation of Duties High
Purchase Orders conflicts with Receive Goods and Services Segregation of Duties High
Purchase Orders conflicts with Return Goods and Services Segregation of Duties High
Purchasing Setup conflicts with Purchase Orders Segregation of Duties High
Purchasing Setup conflicts with Receive Goods and Services Segregation of Duties High
Purchasing Setup – Critical Access Least Privilege, Segregation of Duties High
Receivables Banks conflicts with Receivables Receipts Segregation of Duties High
Receivables Receipts conflicts with Create Sales Order Segregation of Duties High
Receivables Receipts conflicts with Customer Account Maintenance Segregation of Duties High
Receivables Receipts conflicts with Receivables Transactions Segregation of Duties High
Receivables Receipts conflicts with Release Sales Order Segregation of Duties High
Receivables Setup conflicts with Receivables Transactions Segregation of Duties High
Receivables Transactions conflicts with Release Sales Order Segregation of Duties High
Receivables Transactions conflicts with Remittances Segregation of Duties High
Remittances conflicts with Create Sales Order Segregation of Duties High
Remittances conflicts with Release Sales Order Segregation of Duties High
Restrict application, action, row, column, processing option, tab and exit security as appropriate Least Privilege High
Restrict Users that access to unsecure navigation aids in Production Least Privilege High
Restrict Users that have access to Object Workbench Least Privilege High
Restrict Users that have access to Security Workbench Least Privilege High
Set Up Payment conflicts with Payables Payments Segregation of Duties High

MS Dynamics GP

Showing 45 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of Duties Critical
AR Write-off conflicts with Receivables Transactions Segregation of Duties High
Create Sales Order conflicts with Receivables Transactions Segregation of Duties High
Create Suppliers conflicts with Payables Invoices Segregation of Duties High
Create Suppliers conflicts with Payables Payments Segregation of Duties High
Create Suppliers conflicts with Purchase Orders Segregation of Duties High
Create Suppliers – Critical Access Least Privilege, Segregation of Duties High
Customer Account Maintenance conflicts with Create Sales Order Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Credit Memos Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Customer Account Maintenance conflicts with Remittances Segregation of Duties High
Customer Account Maintenance – Critical Access Least Privilege, Segregation of Duties High
Enter Journal Entry conflicts with General Ledger Set Up Segregation of Duties High
Enter Journal Entry conflicts with Post Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Post Journal Entry Segregation of Duties High
General Ledger Periods – Critical Access Least Privilege, Segregation of Duties High
General Ledger Setup conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Setup conflicts with Mass Allocate Journal Entries Segregation of Duties High
General Ledger Setup – Critical Access Least Privilege, Segregation of Duties High
Maintain Chart of Accounts – Critical Access Least Privilege, Segregation of Duties High
Mass Allocate Journal Entries conflicts with Enter Journal Entry Segregation of Duties High
Payables Invoices conflicts with Payables Payments Segregation of Duties High
Payables Invoices conflicts with Payables Setup Segregation of Duties High
Payables Payments conflicts with Purchase Orders Segregation of Duties High
Payables Setup conflicts with Payables Payments Segregation of Duties High
Payables Setup – Critical Access Least Privilege, Segregation of Duties High
Post Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Purchase Orders conflicts with Payables Invoices Segregation of Duties High
Purchase Orders conflicts with Receive Goods and Services Segregation of Duties High
Purchasing Setup conflicts with Purchase Orders Segregation of Duties High
Purchasing Setup conflicts with Receive Goods and Services Segregation of Duties High
Purchasing Setup – Critical Access Least Privilege, Segregation of Duties High
Receivables Credit Memos conflicts with Receivables Receipts Segregation of Duties High
Receivables Receipts conflicts with Create Sales Order Segregation of Duties High
Receivables Receipts conflicts with Create Sales Order Segregation of Duties High
Receivables Receipts conflicts with Customer Account Maintenance Segregation of Duties High
Receivables Receipts conflicts with Receivables Transactions Segregation of Duties High
Receivables Setup conflicts with Receivables Transactions Segregation of Duties High
Receivables Setup – Critical Access Least Privilege, Segregation of Duties High
Receivables Transactions conflicts with Customer Credit Information Segregation of Duties High
Receivables Transactions conflicts with Remittances Segregation of Duties High
Remittances conflicts with Create Sales Order Segregation of Duties High
Set Up Payment conflicts with Payables Payments Segregation of Duties High
Set Up Payment – Critical Access Least Privilege, Segregation of Duties High

Oracle EBS

Showing 225 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of Duties Critical
Approve Invoices conflicts with Create Suppliers Segregation of Duties High
Approve Invoices conflicts with Payables Invoices Segregation of Duties High
Approve Invoices conflicts with Payables Payments Segregation of Duties High
AR Write-off conflicts with Receivables Transactions Segregation of Duties High
Assets Workbench conflicts with Assets Depreciation Segregation of Duties High
Assets Workbench conflicts with Mass Transactions Segregation of Duties High
Assets Workbench conflicts with Physical Inventory Segregation of Duties Medium
Bank Reconciliations conflicts with Payables Invoices Segregation of Duties High
Bank Reconciliations conflicts with Payables Payments Segregation of Duties High
Bank Reconciliations conflicts with Receivable Receipts Segregation of Duties Medium
Bank Reconciliations conflicts with Receivables Clear Customer Balances Segregation of Duties Medium
Benefits Configuration conflicts with Maintain Payroll Configuration Segregation of Duties High
Benefits Configuration conflicts with Process Payroll Segregation of Duties High
Benefits Configuration conflicts with Payroll Maintenance Segregation of Duties High
Create Items conflicts with Cycle Counting Segregation of Duties Medium
Create Items conflicts with Inventory Transactions Segregation of Duties Medium
Create Requisition conflicts with Create Items Segregation of Duties Medium
Create Requisition conflicts with Create Suppliers Segregation of Duties High
Create Requisition conflicts with Enter Purchase Order Release Segregation of Duties Medium
Create Requisition conflicts with Payables Invoices Segregation of Duties Medium
Create Requisition conflicts with Payables Payments Segregation of Duties High
Create Requisition conflicts with Purchase Orders Segregation of Duties Medium
Create Resources conflicts with Enter Enterprise Asset Management Transactions Segregation of Duties Medium
Create Sales Order conflicts with Inventory Transactions Segregation of Duties Medium
Create Sales Order conflicts with Receivables Transactions Segregation of Duties High
Create Supplier – Critical Access Least Privilege, Segregation of Duties High
Create Suppliers conflicts with Approve Invoices Segregation of Duties High
Create Suppliers conflicts with Enter Purchase Order Release Segregation of Duties Medium
Create Suppliers conflicts with Payables Invoices Segregation of Duties High
Create Suppliers conflicts with Payables Payments Segregation of Duties High
Create Suppliers conflicts with Purchase Orders Segregation of Duties High
Create Suppliers conflicts with Receive Goods and Services Segregation of Duties Medium
Create Work Order conflicts with Approval Authorization Control Segregation of Duties Medium
Create Work Order conflicts with Approve Invoice Segregation of Duties Medium
Create Work Order conflicts with Approve Purchase Order Segregation of Duties Medium
Create Work Order conflicts with Create Asset Numbers Segregation of Duties Medium
Create Work Order conflicts with Create Customer Segregation of Duties Medium
Create Work Order conflicts with Create Items Segregation of Duties Medium
Create Work Order conflicts with Create Projects Segregation of Duties Medium
Create Work Order conflicts with Create Purchase Order Segregation of Duties Medium
Create Work Order conflicts with Create Resources Segregation of Duties Medium
Create Work Order conflicts with Create Suppliers Segregation of Duties Medium
Create Work Order conflicts with Cycle Counting Segregation of Duties Medium
Create Work Order conflicts with Enter Accounts Receivables Invoice Segregation of Duties Medium
Create Work Order conflicts with Enter Customer Receipts Segregation of Duties Medium
Create Work Order conflicts with Enter Employee Labor Rates Segregation of Duties Medium
Create Work Order conflicts with Enter Enterprise Asset Management Transactions Segregation of Duties Medium
Create Work Order conflicts with Enter Journal Entry Segregation of Duties Medium
Create Work Order conflicts with Inventory Transactions Segregation of Duties Medium
Create Work Order conflicts with Payables Payments Segregation of Duties Medium
Create Work Order conflicts with Payables Invoices Segregation of Duties Medium
Create Work Order conflicts with Post Journal Entry Segregation of Duties Medium
Create Work Order conflicts with Print Checks Segregation of Duties Medium
Create Work Order conflicts with Receive Goods and Services Segregation of Duties Medium
Create Work Order conflicts with Return Goods and Services Segregation of Duties Medium
Create Work Order conflicts with Set Up Auto Create Purchase Segregation of Duties Medium
Create Work Order conflicts with Update Enterprise Asset Management Setup Segregation of Duties Medium
Customer Account Maintenance conflicts with Create Sales Order Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Credit Memos Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Customer Account Maintenance conflicts with Release Sales Order Segregation of Duties Medium
Customer Account Maintenance conflicts with Remittances Segregation of Duties Medium
Customer Account Maintenance conflicts with Ship Customer Goods Segregation of Duties Medium
Cycle Counting conflicts with Purchase Orders Segregation of Duties Medium
Cycle Counting conflicts with Receive Goods and Services Segregation of Duties Medium
Delete Receipts conflicts with Ship Customer Goods Segregation of Duties Medium
Development conflicts with Access Administration Segregation of Duties High
Development conflicts with System Administration Segregation of Duties High
Enter Accounts Receivable Invoice conflicts with Item Price List Segregation of Duties Medium
Enter Accounts Receivable Invoice conflicts with Ship Customer Goods Segregation of Duties Medium
Enter Debit Memo conflicts with Release Sales Order Segregation of Duties Medium
Enter Enterprise Asset Management Transactions conflicts with Create Items Segregation of Duties Medium
Enter Enterprise Asset Management Transactions conflicts with Cycle Counting Segregation of Duties Medium
Enter Journal Entry conflicts with Approve Invoices Segregation of Duties High
Enter Journal Entry conflicts with Approve Purchase Orders Segregation of Duties High
Enter Journal Entry conflicts with Assets Depreciation Segregation of Duties High
Enter Journal Entry conflicts with Assets Workbench Segregation of Duties High
Enter Journal Entry conflicts with Create Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Enter Customer Receipts Segregation of Duties High
Enter Journal Entry conflicts with Enter Enterprise Asset Management Transactions Segregation of Duties High
Enter Journal Entry conflicts with General Ledger Set Up Segregation of Duties High
Enter Journal Entry conflicts with Maintain Chart of Accounts Segregation of Duties High
Enter Journal Entry conflicts with Mass Transactions Segregation of Duties High
Enter Journal Entry conflicts with Payables Invoices Segregation of Duties High
Enter Journal Entry conflicts with Payables Payments Segregation of Duties High
Enter Journal Entry conflicts with Physical Inventory Segregation of Duties High
Enter Journal Entry conflicts with Post Journal Entry Segregation of Duties High
Enter Journal Entry conflicts with Purchase Orders Segregation of Duties High
Enter Journal Entry conflicts with Release Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Remittances Segregation of Duties High
Enter Journal Entry conflicts with Ship Customer Goods Segregation of Duties High
Enter Purchase Order Release conflicts with Approval Authorization Control Segregation of Duties High
Enter Purchase Order Release conflicts with Approve Invoices Segregation of Duties Medium
Enter Purchase Order Release conflicts with Payables Invoices Segregation of Duties High
Enter Purchase Order Release conflicts with Receive Goods and Services Segregation of Duties High
General Ledger Periods conflicts with General Ledger Setup Segregation of Duties High
General Ledger Periods conflicts with Payables Invoices Segregation of Duties High
General Ledger Periods conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Maintain Chart of Accounts Segregation of Duties High
General Ledger Periods conflicts with Payables Payments Segregation of Duties High
General Ledger Periods conflicts with Post Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Purchase Orders Segregation of Duties High
General Ledger Periods conflicts with Receivables Receipts Segregation of Duties High
General Ledger Periods conflicts with Receive Goods and Services Segregation of Duties High
General Ledger Setup conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Setup conflicts with Mass Allocate Journal Entries Segregation of Duties High
General Ledger Setup conflicts with Payables Invoices Segregation of Duties High
HR Benefits conflicts with Process Payroll Segregation of Duties High
Inventory Transactions conflicts with Receive Goods and Services Segregation of Duties Medium
Item Price List conflicts with Enter Customer Receipts Segregation of Duties High
Item Price List conflicts with Release Sales Order Segregation of Duties High
Item Price List conflicts with Remittances Segregation of Duties High
Item Price List conflicts with Ship Customer Goods Segregation of Duties Medium
Limit access that creates Segregation of Duties risk Least Privilege High
Limit access to Alert Manager Least Privilege High
Limit access to configure Profile Options Least Privilege High
Limit access to critical Oracle EBS functions Least Privilege High
Limit access to SQL forms Least Privilege High
Limit access to User and System Profile Values Form Least Privilege High
Limit user accounts having access to super-user type functionality Least Privilege High
Maintain Employee Master Data conflicts with Maintain Payroll Configuration Segregation of Duties High
Maintain Employee Master Data conflicts with Maintain Time Data Segregation of Duties High
Maintain Employee Master Data conflicts with Payroll Maintenance Segregation of Duties High
Maintain Employee Master Data conflicts with Process Payroll Segregation of Duties High
Maintain Employee Position conflicts with Maintain Payroll Configuration Segregation of Duties High
Maintain Employee Position conflicts with Payroll Maintenance Segregation of Duties High
Maintain Employee Position conflicts with Process Payroll Segregation of Duties High
Maintain Payroll Configuration conflicts with Process Payroll Segregation of Duties High
Maintain Time Data conflicts with Maintain Payroll Configuration Segregation of Duties High
Maintain Time Data conflicts with Payroll Maintenance Segregation of Duties High
Maintain Time Data conflicts with Process Payroll Segregation of Duties High
Mass Allocate Journal Entries conflicts with Enter Journal Entry Segregation of Duties Medium
Mass Transactions conflicts with Approve Invoices Segregation of Duties Medium
Mass Transactions conflicts with Approve Purchase Orders Segregation of Duties Medium
Mass Transactions conflicts with Create Sales Order Segregation of Duties Medium
Mass Transactions conflicts with Payables Invoices Segregation of Duties Medium
Mass Transactions conflicts with Payables Payments Segregation of Duties Medium
Mass Transactions conflicts with Purchase Orders Segregation of Duties Medium
Mass Transactions conflicts with Release Sales Order Segregation of Duties Medium
Mass Transactions conflicts with Remittances Segregation of Duties Medium
Mass Transactions conflicts with Ship Customer Goods Segregation of Duties Medium
Mass Transactions conflicts with Receivables Receipts Segregation of Duties Medium
Modifiers conflicts with Enter Customer Receipts Segregation of Duties Medium
Modifiers conflicts with Release Sales Order Segregation of Duties Medium
Modifiers conflicts with Remittances Segregation of Duties Medium
Modifiers conflicts with Ship Customer Goods Segregation of Duties Medium
Modify Bank Information conflicts with Item Price List Segregation of Duties Medium
Modify Bank Information conflicts with Modifiers Segregation of Duties Medium
Modify Employee Information conflicts with Define Payroll Information Segregation of Duties High
Monitor accounts assigned delivered EBS roles or responsibilities Least Privilege High
Monitor accounts with access to AZN Menus Least Privilege High
Monitor accounts with access to PCI relevant data Data Controls High
Monitor accounts with access to PHI or PII relevant data Data Controls High
Monitor accounts with access to SOX Critical Functions Least Privilege High
Monitor accounts with access to Utilities: Diagnostics and Utilities: SQL Trace Least Privilege High
Monitor GL Journal Sources Configuration controls High
Monitor of users with access to Order Entry Administrator Least Privilege High
Monitor users with access to Approvals Management Administrator Least Privilege High
Monitor users with access to Cash Management Setup Least Privilege High
Monitor users with access to Payments Setup Administrator Least Privilege High
Monitor users with access to Trading Community Architecture Least Privilege High
Monitor users with access to Workflow Administrator Least Privilege High
Payables Invoices conflicts with Payables Payments Segregation of Duties High
Payables Invoices conflicts with Payables Setup Segregation of Duties High
Payables Invoices conflicts with Purchase Orders Segregation of Duties High
Payables Invoices conflicts with Receive Goods and Services Segregation of Duties Medium
Payables Payments conflicts with Purchase Orders Segregation of Duties High
Payables Payments conflicts with Receive Goods and Services Segregation of Duties High
Payables Setup – Critical Access Least Privilege, Segregation of Duties High
Payables Setup conflicts with Payables Invoices Segregation of Duties High
Payables Setup conflicts with Payables Payments Segregation of Duties High
Payroll Maintenance conflicts with Process Payroll Segregation of Duties High
Perform Cash Reconciliations conflicts with Item Price List Segregation of Duties High
Perform Cash Reconciliations conflicts with Ship Confirm Goods Segregation of Duties Medium
Perform Cash Reconciliations conflicts with Ship Customer Goods Segregation of Duties Medium
Physical Inventory conflicts with Receive Goods and Services Segregation of Duties Medium
Post Journal Entry conflicts with Approve Invoices Segregation of Duties High
Post Journal Entry conflicts with Approve Purchase Orders Segregation of Duties High
Post Journal Entry conflicts with Assets Depreciation Segregation of Duties High
Post Journal Entry conflicts with Assets Workbench Segregation of Duties High
Post Journal Entry conflicts with Create Sales Order Segregation of Duties High
Post Journal Entry conflicts with Enter Customer Receipts Segregation of Duties High
Post Journal Entry conflicts with Enter Enterprise Asset Management Transactions Segregation of Duties High
Post Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Post Journal Entry conflicts with Maintain Chart of Accounts Segregation of Duties High
Post Journal Entry conflicts with Mass Transactions Segregation of Duties High
Post Journal Entry conflicts with Payables Invoices Segregation of Duties High
Post Journal Entry conflicts with Payables Payments Segregation of Duties High
Post Journal Entry conflicts with Physical Inventory Segregation of Duties High
Post Journal Entry conflicts with Purchase Orders Segregation of Duties High
Post Journal Entry conflicts with Release Sales Order Segregation of Duties High
Post Journal Entry conflicts with Remittances Segregation of Duties High
Post Journal Entry conflicts with Ship Customer Goods Segregation of Duties High
Pricing Agreements conflicts with Enter Customer Receipts Segregation of Duties High
Pricing Agreements conflicts with Release Sales Order Segregation of Duties High
Pricing Agreements conflicts with Remittances Segregation of Duties High
Pricing Agreements conflicts with Ship Customer Goods Segregation of Duties High
Purchase Orders conflicts with Approval Authorization Control Segregation of Duties High
Purchase Orders conflicts with Approve Invoices Segregation of Duties Medium
Purchase Orders conflicts with Enter Purchase Order Release Segregation of Duties High
Purchase Orders conflicts with Receive Goods and Services Segregation of Duties Medium
Purchase Orders conflicts with Return Goods and Services Segregation of Duties High
Purchasing Setup – Critical Access Least Privilege, Segregation of Duties High
Purchasing Setup conflicts with Purchase Orders Segregation of Duties High
Purchasing Setup conflicts with Receive Goods and Services Segregation of Duties High
Receivables Banks conflicts with Receivables Receipts Segregation of Duties High
Receivables Clear Customer Balances conflicts with Receivables Receipts Segregation of Duties High
Receivables Credit Memos conflicts with Receivables Receipts Segregation of Duties High
Receivables Receipts conflicts with Create Sales Order Segregation of Duties High
Receivables Receipts conflicts with Customer Account Maintenance Segregation of Duties High
Receivables Receipts conflicts with Receivables Transactions Segregation of Duties Medium
Receivables Receipts conflicts with Release Sales Order Segregation of Duties High
Receivables Setup conflicts with Receivables Transactions Segregation of Duties High
Receivables Transactions conflicts with Customer Credit Information Segregation of Duties Medium
Receivables Transactions conflicts with Release Sales Order Segregation of Duties Medium
Receivables Transactions conflicts with Remittances Segregation of Duties Medium
Remittances conflicts with Create Sales Order Segregation of Duties Medium
Remittances conflicts with Release Sales Order Segregation of Duties Medium
Restrict Users that can develop concurrent programs Least Privilege High
Restrict Users with access to modify audit and logging Least Privilege High
Return Goods and Services conflicts with Enter Customer Receipts Segregation of Duties Medium
Reversing Receipts conflicts with Ship Customer Goods Segregation of Duties Medium
Set Up Payment conflicts with Payables Invoices Segregation of Duties High
Set Up Payment conflicts with Payables Payments Segregation of Duties High

Oracle ERP Cloud

Showing 83 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of Duties Critical
Approve Invoices conflicts with Create Suppliers Segregation of Duties High
Approve Invoices conflicts with Payables Invoices Segregation of Duties High
Approve Invoices conflicts with Payables Payments Segregation of Duties High
AR Write-off conflicts with Receivables Transactions Segregation of Duties High
Create Asset Accounting conflicts with Define FA Setup Segregation of Duties High
Create Assets conflicts with Perform Mass Retirements Segregation of Duties High
Create Assets conflicts with Run Depreciation Segregation of Duties High
Create Inventory conflicts with Cycle Counts Segregation of Duties High
Create Inventory conflicts with Receive Goods and Services Segregation of Duties High
Create Items conflicts with Create Item Costs Segregation of Duties High
Create Procurement Agent conflicts with Purchase Orders Segregation of Duties High
Create Requisition conflicts with Approve Requisition Segregation of Duties High
Create Requisition conflicts with Create Suppliers Segregation of Duties High
Create Requisition conflicts with Payables Invoices Segregation of Duties High
Create Requisition conflicts with Payables Payments Segregation of Duties High
Create Requisition conflicts with Purchase Orders Segregation of Duties High
Create Sales Order conflicts with Receivables Transactions Segregation of Duties High
Create Suppliers conflicts with Approve Suppliers Segregation of Duties High
Create Suppliers conflicts with Payables Invoices Segregation of Duties High
Create Suppliers conflicts with Payables Payments Segregation of Duties High
Create Suppliers conflicts with Purchase Orders Segregation of Duties High
Create Suppliers – Critical Access Least Privilege, Segregation of Duties High
Customer Account Maintenance conflicts with Create Sales Order Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Credit Memos Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Cycle Counts conflicts with Approve Cycle Counts Segregation of Duties High
Enter Journal Entry conflicts with Approve Invoices Segregation of Duties High
Enter Journal Entry conflicts with Create Sales Order Segregation of Duties High
Enter Journal Entry conflicts with General Ledger Set Up Segregation of Duties High
Enter Journal Entry conflicts with Maintain Budgets Segregation of Duties High
Enter Journal Entry conflicts with Maintain Chart of Accounts Segregation of Duties High
Enter Journal Entry conflicts with Payables Invoices Segregation of Duties High
Enter Journal Entry conflicts with Payables Payments Segregation of Duties High
Enter Journal Entry conflicts with Post Journal Entry Segregation of Duties High
Enter Journal Entry conflicts with Purchase Orders Segregation of Duties High
General Ledger Periods conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Payables Invoices Segregation of Duties High
General Ledger Periods conflicts with Payables Payments Segregation of Duties High
General Ledger Periods conflicts with Post Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Receivables Receipts Segregation of Duties High
General Ledger Setup conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Setup conflicts with Payables Invoices Segregation of Duties High
Payables Invoices conflicts with Bank Reconciliations Segregation of Duties High
Payables Invoices conflicts with Payables Payments Segregation of Duties High
Payables Invoices conflicts with Payables Setup Segregation of Duties High
Payables Invoices conflicts with Purchase Orders Segregation of Duties High
Payables Payments conflicts with Bank Reconciliations Segregation of Duties High
Payables Payments conflicts with Purchase Orders Segregation of Duties High
Payables Payments conflicts with Reconcile Cash Accounts Segregation of Duties High
Payables Setup conflicts with Payables Invoices Segregation of Duties High
Payables Setup conflicts with Payables Payments Segregation of Duties High
Perform Cash Transaction conflicts with Bank Reconciliations Segregation of Duties High
Perform Cash Transaction conflicts with Cash Management Setup Segregation of Duties High
Perform Mass Additions conflicts with Post Mass Additions Segregation of Duties High
Perform Mass Retirements conflicts with Post Mass Retirements Segregation of Duties High
Post Journal Entry conflicts with Approve Invoices Segregation of Duties High
Post Journal Entry conflicts with Create Sales Order Segregation of Duties High
Post Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Post Journal Entry conflicts with Maintain Chart of Accounts Segregation of Duties High
Post Journal Entry conflicts with Payables Invoices Segregation of Duties High
Post Journal Entry conflicts with Payables Payments Segregation of Duties High
Post Journal Entry conflicts with Purchase Orders Segregation of Duties High
Purchase Orders conflicts with Approve Invoices Segregation of Duties Medium
Purchase Orders conflicts with Receive Goods and Services Segregation of Duties High
Purchase Orders conflicts with Return Goods and Services Segregation of Duties High
Purchasing Setup conflicts with Purchase Orders Segregation of Duties High
Purchasing Setup conflicts with Receive Goods and Services Segregation of Duties High
Receivables Banks conflicts with Receivables Receipts Segregation of Duties High
Receivables Credit Memos conflicts with Receivables Receipts Segregation of Duties High
Receivables Receipts conflicts with Bank Reconciliations Segregation of Duties High
Receivables Receipts conflicts with Create Sales Order Segregation of Duties High
Receivables Receipts conflicts with Customer Account Maintenance Segregation of Duties High
Receivables Setup conflicts with Receivables Transactions Segregation of Duties High
Receivables Transactions conflicts with Customer Credit Information Segregation of Duties High
Receive Goods and Services conflicts with Cycle Counts Segregation of Duties High
Set Up Payment conflicts with Payables Invoices Segregation of Duties High
Set Up Payment conflicts with Payables Payments Segregation of Duties High
Set Up Payment conflicts with Release Invoice Holds Segregation of Duties Medium
Setup Depreciation conflicts with Create Mass Depreciation Adjustments Segregation of Duties High
Setup Depreciation conflicts with Run Depreciation Segregation of Duties High
Setup Tax conflicts with Payables Invoices Segregation of Duties High
Setup Tax conflicts with Payables Payments Segregation of Duties High

PeopleSoft

Showing 97 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of Duties Critical
Approve Invoices conflicts with Create Suppliers Segregation of Duties High
Approve Invoices conflicts with Payables Invoices Segregation of Duties High
Approve Invoices conflicts with Payables Payments Segregation of Duties High
AR Write-off conflicts with Receivables Transactions Segregation of Duties High
Bank Reconciliations conflicts with Payables Invoices Segregation of Duties High
Bank Reconciliations conflicts with Payables Payments Segregation of Duties High
Bank Reconciliations conflicts with Receivables Receipts Segregation of Duties High
Create Requisition conflicts with Create Suppliers Segregation of Duties High
Create Requisition conflicts with Payables Invoices Segregation of Duties High
Create Requisition conflicts with Payables Payments Segregation of Duties High
Create Requisition conflicts with Purchase Orders Segregation of Duties High
Create Sales Order conflicts with Receivables Transactions Segregation of Duties High
Create Suppliers conflicts with Approve Suppliers Segregation of Duties High
Create Suppliers conflicts with Payables Invoices Segregation of Duties High
Create Suppliers conflicts with Payables Payments Segregation of Duties High
Create Suppliers conflicts with Purchase Orders Segregation of Duties High
Create Suppliers – Critical Access Least Privilege, Segregation of Duties High
Customer Account Maintenance conflicts with Create Sales Order Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Credit Memos Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Customer Account Maintenance conflicts with Release Sales Order Segregation of Duties High
Customer Account Maintenance – Critical Access Least Privilege, Segregation of Duties High
Customer Account Maintenance conflicts with Remittances Segregation of Duties High
Development conflicts with Access Administration Segregation of Duties High
Development – Critical Access Least Privilege, Segregation of Duties Critical
Enter Debit Memo conflicts with Release Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Approve Invoices Segregation of Duties High
Enter Journal Entry conflicts with Create Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Enter Customer Receipts Segregation of Duties High
Enter Journal Entry conflicts with General Ledger Set Up Segregation of Duties High
Enter Journal Entry conflicts with Payables Invoices Segregation of Duties High
Enter Journal Entry conflicts with Payables Payments Segregation of Duties High
Enter Journal Entry conflicts with Post Journal Entry Segregation of Duties High
Enter Journal Entry conflicts with Purchase Orders Segregation of Duties High
Enter Journal Entry conflicts with Release Sales Order Segregation of Duties High
Enter Journal Entry conflicts with Remittances Segregation of Duties High
General Ledger Periods conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Payables Invoices Segregation of Duties High
General Ledger Periods conflicts with Payables Payments Segregation of Duties High
General Ledger Periods conflicts with Post Journal Entry Segregation of Duties High
General Ledger Periods conflicts with Receivables Receipts Segregation of Duties High
General Ledger Periods – Critical Access Least Privilege, Segregation of Duties High
General Ledger Setup conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Setup conflicts with Mass Allocate Journal Entries Segregation of Duties High
General Ledger Setup – Critical Access Least Privilege, Segregation of Duties High
Limit access that create Segregation of Duties risk Least Privilege High
Limit access to use of Correction in authorized actions for component pages Least Privilege High
Maintain Chart of Accounts conflicts with General Ledger Periods Segregation of Duties High
Maintain Chart of Accounts conflicts with General Ledger Setup Segregation of Duties High
Maintain Chart of Accounts conflicts with Post Journal Entry Segregation of Duties High
Maintain Chart of Accounts – Critical Access Least Privilege, Segregation of Duties High
Maintain Hierarchies conflicts with Create Suppliers Segregation of Duties High
Maintain Hierarchies conflicts with Enter Journal Entry Segregation of Duties High
Maintain Hierarchies conflicts with General Ledger Setup Segregation of Duties High
Maintain Hierarchies conflicts with Payables Invoices Segregation of Duties High
Maintain Hierarchies conflicts with Payables Payments Segregation of Duties High
Maintain Hierarchies conflicts with Post Journal Entry Segregation of Duties High
Maintain Hierarchies – Critical Access Least Privilege, Segregation of Duties High
Mass Allocate Journal Entries conflicts with Enter Journal Entry Segregation of Duties High
Monitor accounts with access to SOX Critical Functions Least Privilege High
Payables Invoices conflicts with Payables Payments Segregation of Duties High
Payables Invoices conflicts with Payables Setup Segregation of Duties High
Payables Invoices conflicts with Purchase Orders Segregation of Duties High
Payables Payments conflicts with Purchase Orders Segregation of Duties High
Payables Setup conflicts with Payables Payments Segregation of Duties High
Payables Setup – Critical Access Least Privilege, Segregation of Duties High
Post Journal Entry conflicts with Approve Invoices Segregation of Duties High
Post Journal Entry conflicts with Create Sales Order Segregation of Duties High
Post Journal Entry conflicts with Enter Customer Receipts Segregation of Duties High
Post Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Post Journal Entry conflicts with Payables Invoices Segregation of Duties High
Post Journal Entry conflicts with Payables Payments Segregation of Duties High
Post Journal Entry conflicts with Purchase Orders Segregation of Duties High
Post Journal Entry conflicts with Release Sales Order Segregation of Duties High
Post Journal Entry conflicts with Remittances Segregation of Duties High
Purchase Orders conflicts with Approve Invoices Segregation of Duties Medium
Purchase Orders conflicts with Receive Goods and Services Segregation of Duties High
Purchase Orders conflicts with Return Goods and Services Segregation of Duties High
Purchasing Setup conflicts with Purchase Orders Segregation of Duties High
Purchasing Setup conflicts with Receive Goods and Services Segregation of Duties High
Purchasing Setup – Critical Access Least Privilege, Segregation of Duties High
Receivables Banks conflicts with Receivables Receipts Segregation of Duties High
Receivables Clear Customer Balances conflicts with Receivables Receipts Segregation of Duties High
Receivables Credit Memos conflicts with Receivables Receipts Segregation of Duties High
Receivables Receipts conflicts with Create Sales Order Segregation of Duties High
Receivables Receipts conflicts with Customer Account Maintenance Segregation of Duties High
Receivables Receipts conflicts with Release Sales Order Segregation of Duties High
Receivables Setup conflicts with Receivables Transactions Segregation of Duties High
Receivables Setup – Critical Access Least Privilege, Segregation of Duties High
Receivables Transactions conflicts with Customer Credit Information Segregation of Duties High
Receivables Transactions conflicts with Release Sales Order Segregation of Duties High
Receivables Transactions conflicts with Remittances Segregation of Duties High
Remittances conflicts with Create Sales Order Segregation of Duties High
Set Up Payment conflicts with Payables Invoices Segregation of Duties High
Set Up Payment conflicts with Payables Payments Segregation of Duties High
Set Up Payment – Critical Access Least Privilege, Segregation of Duties High

SAP

Showing 229 controls:
Control TitleControl TypeRisk Rating
Adjust the AR subsidiary balance using AR payments and then conceal with journal entries Segregation of Duties Critical
Adjust the AR subsidiary balance using billing documents and then conceal with journal entries. Segregation of Duties Medium
Adjust the AR subsidiary balance using cash application and then conceal with journal entries. Segregation of Duties Medium
Adjust the subsidiary balance using the vendor invoice entry and then cover it up using journal entries Segregation of Duties Critical
Allocate costs to unauthorized cost centers Segregation of Duties Low
Cost Center Maintenance conflicts with Process Revenue Entries Segregation of Duties Medium
Cost Center Maintenance conflicts with Process Cost Transfers Segregation of Duties Medium
Alter Activity Type conflicts with Cost Allocation Segregation of Duties Low
Approve Purchase Order conflicts with Create Material Segregation of Duties Medium
Approve Purchase Order conflicts with Payables Payments Segregation of Duties High
Approve Purchase Orders conflicts with Payables Invoices Segregation of Duties High
Approve Purchase Orders conflicts with Receive Goods and Services Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Archiving conflicts with Client Administration Segregation of Duties Medium
Archiving conflicts with Configuration Segregation of Duties Medium
Archiving conflicts with System Administration Segregation of Duties Medium
Archiving conflicts with Transport Administration Segregation of Duties Medium
Basis Archiving Actions – Critical Access Least Privilege, Segregation of Duties High
Basis Configuration Actions – Critical Access Least Privilege, Segregation of Duties High
Basis Critical Actions – Critical Access Least Privilege, Segregation of Duties High
Basis Development conflicts with Client Administration Segregation of Duties Medium
Basis Development conflicts with Configuration Segregation of Duties High
Basis Development conflicts with System Administration Segregation of Duties Critical
Basis Development conflicts with Transport Administration Segregation of Duties High
Basis Performance Actions – Critical Access Least Privilege, Segregation of Duties High
Basis Table Maintenance & Client Administration Segregation of Duties High
Basis Table Maintenance & System Administration Segregation of Duties High
Basis Utilities & Client Administration Segregation of Duties Medium
Basis Utilities & Configuration Segregation of Duties High
Basis Utilities & System Administration Segregation of Duties Medium
Basis Utilities & Transport Administration Segregation of Duties High
Can hide differences between bank paymnts & posted AP recds Segregation of Duties High
Change config of payroll then modify payroll master data Segregation of Duties High
Change configuration of payroll then process payroll Segregation of Duties High
Change customer master and enter inappropriate invoice Segregation of Duties High
Change HR Benefits and process payroll without authorization Segregation of Duties High
Change payroll and processing payroll without authorization Segregation of Duties High
Change payroll config and maintain payroll settings Segregation of Duties High
Change rebate agmt and change master record in cust favor Segregation of Duties High
Change the customer master file and modify cash received Segregation of Duties High
Changing payroll master data and modifying PD Structure Segregation of Duties High
Chg credit limit of marginal cust & manage SOs in it’s favor Segregation of Duties High
Clear balance and change billing doc for same customer Segregation of Duties High
Cover up shipment by maintaining a fictitious sales doc Segregation of Duties High
Create a credit memo then clear the customer to prompt a payment. Segregation of Duties High
Create a manual check and perform bank reconciliation Segregation of Duties High
Create an invoice via ERS GR & hide via asset depreciation Segregation of Duties High
Create billing and inappropriately post payment Segregation of Duties High
Create fictitious vendor and initiate payment to the vendor Segregation of Duties High
Create fictitious vendor invoice and initiate manual checks for it Segregation of Duties High
Create fictitious vendor invoice and initiate payment for it Segregation of Duties High
Create or change a PO to contain an invalid service Segregation of Duties Medium
Create PO to contain an invalid material Segregation of Duties Medium
Create Transport & Perform Transport Segregation of Duties High
Cross Application Master Data Segregation of Duties High
Customer Credit Information conflicts with Receivables Receipts Segregation of Duties High
Enter and approve time which could result in fraudulent payroll amounts. Segregation of Duties High
Enter false time data and modify payroll configuration Segregation of Duties High
Enter fictitious sales rebate and render fictitious payment Segregation of Duties High
Enter Purch Agreements & create/modify fictitious Vendor Segregation of Duties High
Enter Purchasing Agreement and adjust the inventory Segregation of Duties Medium
Enter Purchasing Agreement and adjust the inventory Segregation of Duties Medium
Enter Purchasing Agreement and adjust the inventory Segregation of Duties Medium
Enter Purchasing Agreements and the render a manual check for payment Segregation of Duties High
Enter Purchasing Agreements and the rendering of payment Segregation of Duties High
Enter sales documents and give sales rebates Segregation of Duties Medium
Enter sales documents and lower prices for fraudulent gain Segregation of Duties High
Enter sales invoices and approve credit limits Segregation of Duties High
Enter unauth payment and perform bank reconciliation Segregation of Duties High
Enter vendor invoices and accept services Segregation of Duties Medium
Entering false time data and maintaining PD Structure Segregation of Duties High
Finance Archiving Segregation of Duties High
Finance Critical Actions Segregation of Duties High
Finance Master Data Segregation of Duties High
Hide cash deposited and cash collections differences Segregation of Duties High
Hide IM inventory adjustments via ledger entries Segregation of Duties Medium
Hide inventory by not fully receiving order but invoicing Segregation of Duties High
Hide powerful IM inventory adjustments via ledger entries Segregation of Duties Medium
Hide WM inventory adjustments via ledger entries Segregation of Duties Medium
HR Critical Actions Segregation of Duties High
HR Master Data Segregation of Duties High
Inc production to reduce cost var due to productivity loss Segregation of Duties Low
Increase production to reduce cost variances Segregation of Duties Critical
Initiate a payment by creating fictitious credit memos Segregation of Duties High
Maintain a fictitious customer and initiate a payment Segregation of Duties High
Maintain a fictitious vendor and direct disbursements to it Segregation of Duties High
Maintain a fictitious vendor and initiate purchase to vendor Segregation of Duties High
Maintain a fictitious vendor and process manual checks to it Segregation of Duties High
Maintain a purch agreement and release a related requisition Segregation of Duties Medium
Maintain a sales doc and generate a billing doc for it Segregation of Duties High
Maintain an asset and manipulate the receipt of the asset Segregation of Duties High
Maintain an invoice and enter or change payments against it Segregation of Duties High
Maintain asset and capitalize or add costs to master record Segregation of Duties Critical
Maintain bank account and create manual checks against it Segregation of Duties High
Maintain bank account and divert incoming payments Segregation of Duties High
Maintain bank account and post a payment from it Segregation of Duties High
Maintain bank account and post a payment from it Segregation of Duties High
Maintain customer master records and post fraudulent payments Segregation of Duties High
Maintain deliveries and enter payments against them Segregation of Duties High
Maintain fictitious customer and initiate orders Segregation of Duties High
Maintain fictitious customer and issue invoices to the customer Segregation of Duties High
Maintain fictitious GL account & hide activity via currency or tax postings Segregation of Duties Medium
Maintain fictitious GL account & hide activity via postings Segregation of Duties Medium
Maintain fictitious vendor and approve purchases to vendor Segregation of Duties High
Maintain material mstr & add items to purch agmts Segregation of Duties Medium
Maintain Number Ranges & System Administration Segregation of Duties High
Maintain PO & accept the services through svc acceptance Segregation of Duties Medium
Maintain PO and release a previously blocked Invoice Segregation of Duties Medium
Maintain purchase orders and release or approve Segregation of Duties High
Maintain Purchasing agreement and create Invoices Segregation of Duties High
Maintain sales docs and post cust payment inappropriately Segregation of Duties Medium
Maintain sales docs and process enter an incorrect invoice Segregation of Duties High
Maintain sales document and immediately clear customer’s obligation Segregation of Duties High
Maintain schemas for payroll and maintain time data Segregation of Duties High
Maintain service or material mstr & add items to purch agmts Segregation of Duties Medium
Maintaining roles or profiles and assigning roles to users Segregation of Duties High
Maintaining Time Data and performing payroll maintenance Segregation of Duties High
Manipulate cc reports to hide inappropriate journal entries Segregation of Duties Medium
Manipulate cc reports to hide inappropriate tax or currency entries Segregation of Duties Medium
Manipulate credit limit and assign rebates Segregation of Duties High
Master data & remittance could result in fraudulent payments Segregation of Duties High
Materials Management Archiving Segregation of Duties High
Materials Management Critical Actions Segregation of Duties High
Modify material master data and create/change a material req Segregation of Duties Medium
Modify payroll master data and enter time data Segregation of Duties High
Modify payroll master data and perform payroll maintenance Segregation of Duties High
Modify payroll master data and then process payroll Segregation of Duties High
Modify Purch agmnts and receive goods for fraudulent purpose Segregation of Duties High
Modify Purch Agmnts and release a previously blocked Invoice Segregation of Duties Medium
Modify Service Master and create a req for the service Segregation of Duties Medium
Modify service master and release a req for the service Segregation of Duties Medium
Modify service master data and enter a manual check to cover payment Segregation of Duties High
Modify service master data and enter covering payment Segregation of Duties High
Modify time data and process payroll without authority Segregation of Duties High
Monitor accounts having access to Sensitive Data Screens (e.g. BOM) critical transactions Least Privilege High
Monitor critical transactions usage, role assignment, and role_user assignment Least Privilege High
Monitor usage for System (BASIS) Administration transactions IT General Controls Critical
Monitor users and user groups that can be process asset write-offs Least Privilege High
Monitor users and user groups that can create customer master records Least Privilege High
Monitor users and user groups that can create material master records Least Privilege High
Monitor users and user groups that can create Vendor master records Least Privilege High
Monitor users and user groups that can perform security administration activities – Role Maintenance Least Privilege High
Monitor users and user groups that can perform security administration activities – user master maintenance Least Privilege High
Monitor users and user groups that can post depreciation Least Privilege High
Monitor users and user groups that can process payments to vendors Least Privilege High
Monitor users and user groups that can process returns/refunds Least Privilege High
Monitor users and user groups that can process Sales Orders Least Privilege High
Monitor users and user groups that can create asset master records Least Privilege High
Monitor users and user groups that perform invoice processing (from Vendors) Least Privilege High
Monitor users and user groups with access to significant financial reporting transactions/financial statements Least Privilege High
Monitor users by their positions/titles with Process (OTC/STP/FIN etc.) roles assignment Least Privilege High
Monitor users and user groups that approve invoices Least Privilege High
Monitor users that approve purchase orders Least Privilege High
Monitor users that can post journal entries Least Privilege High
Monitor users and user groups that create Bank master data Least Privilege High
Monitor users and user groups that can perform treasury operations Least Privilege High
Monitor users that process purchase orders Least Privilege High
Monitor users with ability to open and close posting periods Process controls High
Monitor users with access to high risk SOX critical transactions Least Privilege High
Monitor users with access to program maintenance and ABAP workbench Least Privilege Critical
Monitor users with access to system administration transactions Least Privilege Critical
Monitor users with change permissions in critical authorization objects such as S_PROGRAM, S_DEVELOP, S_TABU_DIS, S_TABU_CLI, S_BTCH_JOB, S_BTCH_ADM Least Privilege Critical
Monitor users with Security Maintenance transactions Least Privilege Critical
Move stock to GR to meet delivery schedule Segregation of Duties Low
Open closed period & receive or issue goods after month end Segregation of Duties Medium
Open closed periods and inappropriately post currency or tax entries Segregation of Duties Medium
Open closed periods and inappropriately post entries Segregation of Duties Medium
Open closed periods and post manual checks after month end Segregation of Duties Medium
Open closed periods and post payments after month end Segregation of Duties Medium
Open closed periods previously enter incoming payments Segregation of Duties Medium
Pay a vendor invoice and hide it via asset depreciation Segregation of Duties High
Perform time evaluations and maintain time data Segregation of Duties Medium
Perform time evaluations and modify PD structure Segregation of Duties Medium
Perform time evaluations and perform payroll maintenance Segregation of Duties Medium
Perform time evaluations and process payroll Segregation of Duties Medium
Perform time evaluations and work schedule evaluations Segregation of Duties Medium
Plant Maintenance Master Data Segregation of Duties High
Post overhead expenses and settle project without approvals Segregation of Duties High
Procure an item and adjust via inventory count Segregation of Duties High
Procure an item and adjust via inventory count Segregation of Duties High
Procure an item and adjust via inventory count Segregation of Duties High
Procurement Archiving Segregation of Duties High
Procurement Critical Actions Segregation of Duties High
Production Order Processing & Confirmation Segregation of Duties Low
Production Planning Archiving Segregation of Duties High
Project Systems Archiving Segregation of Duties High
Project Systems Master Data Segregation of Duties High
Purch unauth items and hide by not fully receiving order Segregation of Duties High
Purch unauthorized items and enact payment for them Segregation of Duties High
Purch unauthorized items and initiate payment by invoicing Segregation of Duties High
Purch unauthorized items and pay with manual check Segregation of Duties High
Purchase Order Approval conflicts with Adjust Inventory Count Segregation of Duties High
Purchase Order Approval conflicts with Enter Goods and Services Segregation of Duties Medium
Purchase Order Approval conflicts with Release Invoices Segregation of Duties Medium
Purchase Order Approval conflicts with Service Acceptance Segregation of Duties Medium
Receive goods for PO and release blocked Invoices Segregation of Duties Medium
Receive/issue incorrect amount and adjust via IM stock count Segregation of Duties High
Receive/issue incorrect amount and adjust via powerful IM stock count Segregation of Duties High
Receive/issue incorrect amount and adjust via WM stock count Segregation of Duties High
Receive or accept service and enter covering payments Segregation of Duties High
Receive or accept service and enter manual payment to cover Segregation of Duties High
Receive services and release blocked invoice to offset recpt Segregation of Duties Medium
Release a requisition and generate the accompanying PO Segregation of Duties Medium
Release an order and initiate payment Segregation of Duties High
Release produced matls to GR stock to meet prod quota Segregation of Duties Medium
Remove material by adjusting out via IM physical inv Segregation of Duties Medium
Remove material by adjusting out via powerful IM physical inv Segregation of Duties Medium
Remove material by adjusting out via WM physical inv Segregation of Duties Medium
Requisition an item and create a PO from that req Segregation of Duties Medium
Requisition an item and then release a requisition Segregation of Duties Medium
Risk of Sales Price modifications for Sales invoicing Segregation of Duties High
Risk of sales price modifications for sales invoicing Segregation of Duties High
Sales & Distribution Archiving Segregation of Duties High
Sales & Distribution Master Data Segregation of Duties High
Sales documents entered and released by the same person Segregation of Duties Medium
Security Administration & Client Administration Segregation of Duties High
Security Administration & Transport Administration Segregation of Duties High
Settle expenses from an unauthorized order Segregation of Duties Low
The automated controls for invoicing can be circumvented. Invoices are usually blocked due to price or quantity differences. Segregation of Duties Medium
Use fictitious project/WBS to allocate overages Segregation of Duties High
Use fictitious project/WBS to post overhead expenses Segregation of Duties High
Users can create a fictitious trade and fraudulently confirm or exercise the trade Segregation of Duties High
Vendor Pricing and A/P payments could result in fraudulent payments being made to the vendor. Segregation of Duties Medium
Vendor Pricing and Manual Check Processing could result in fraudulent payments being made to the vendor. Segregation of Duties Medium
Vendor Pricing and PO Approval could result in fraudulent payments being made to the vendor. Segregation of Duties Medium
Vendor Pricing and Processing Vendor Invoices could result in fraudulent payments being made to the vendor. Segregation of Duties Medium
Vendor Pricing and Releasing Blocked Invoices could result in fraudulent payments being made to the vendor. Segregation of Duties Medium
Vendor Pricing and Releasing Requisitions could result in fraudulent payments being made to the vendor. Segregation of Duties Medium
Vendor Pricing and Requisitioning could result in fraudulent payments being made to the vendor. Segregation of Duties Medium

SAP HANA

Showing 29 controls:
Control TitleControl TypeRisk Rating
Monitor accounts having access to Sensitive Data Screens (e.g. BOM) critical transactions Least Privilege High
Monitor critical transactions usage, role assignment, and role_user assignment Least Privilege High
Monitor usage for System (BASIS) Administration transactions IT General Controls Critical
Monitor users and user groups that approve invoices Least Privilege High
Monitor users and user groups that can be process asset write-offs Least Privilege High
Monitor users and user groups that can create asset master records Least Privilege High
Monitor users and user groups that can create customer master records Least Privilege High
Monitor users and user groups that can create material master records Least Privilege High
Monitor users and user groups that can create Vendor master records Least Privilege High
Monitor users and user groups that can perform security administration activities – Role Maintenance Least Privilege High
Monitor users and user groups that can perform security administration activities – user master maintenance Least Privilege High
Monitor users and user groups that can perform treasury operations Least Privilege High
Monitor users and user groups that can post depreciation Least Privilege High
Monitor users and user groups that can process payments to vendors Least Privilege High
Monitor users and user groups that can process returns/refunds Least Privilege High
Monitor users and user groups that can process Sales Orders Least Privilege High
Monitor users and user groups that create Bank master data Least Privilege High
Monitor users and user groups that perform invoice processing (from Vendors) Least Privilege High
Monitor users and user groups with access to significant financial reporting transactions/financial statements Least Privilege High
Monitor users by their positions/titles with Process (OTC/STP/FIN etc.) roles assignment Least Privilege High
Monitor users that approve purchase orders Least Privilege High
Monitor users that can post journal entries Process controls High
Monitor users that process purchase orders Least Privilege High
Monitor users with ability to open and close posting periods Process controls High
Monitor users with access to high risk SOX critical transactions Least Privilege High
Monitor users with access to program maintenance and ABAP workbench Least Privilege Critical
Monitor users with access to system administration transactions Least Privilege Critical
Monitor users with change permissions in critical authorization objects such as S_PROGRAM, S_DEVELOP, S_TABU_DIS, S_TABU_CLI, S_BTCH_JOB, S_BTCH_ADM Least Privilege Critical
Monitor users with Security Maintenance transactions Least Privilege Critical

Workday

Showing 89 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of Duties Critical
Application Administrator conflicts with Development Segregation of Duties Critical
Application Administrator – Critical Access Least Privilege, Segregation of Duties Critical
Approve Invoices conflicts with Create Payments Segregation of Duties High
Approve Invoices conflicts with Payables Invoices Segregation of Duties High
Approve Purchase Orders conflicts with Approve Invoices Segregation of Duties High
Approve Purchase Orders conflicts with Payables Invoices Segregation of Duties High
Approve Purchase Orders conflicts with Purchase Orders Segregation of Duties High
AR Write-off conflicts with Create Invoice Segregation of Duties High
Bank Reconciliations conflicts with Create Payments Segregation of Duties High
Bank Reconciliations conflicts with Receivables Receipts Segregation of Duties High
Compensation Management conflicts with Maintain Payroll Configuration Segregation of Duties High
Compensation Management conflicts with Maintain Time Data Segregation of Duties High
Compensation Management conflicts with Payroll Maintenance Segregation of Duties High
Compensation Management conflicts with Process Payroll Segregation of Duties High
Create Invoice conflicts with Customer Credit Information Segregation of Duties High
Create Invoice conflicts with Customer Receipts Segregation of Duties High
Create Invoice conflicts with Receivables Receipts Segregation of Duties High
Create Payments conflicts with Payables Setup Segregation of Duties High
Create Payments conflicts with Purchase Orders Segregation of Duties High
Create Payments conflicts with Purchasing Setup Segregation of Duties High
Create Requisition conflicts with Approve Purchase Orders Segregation of Duties Medium
Create Requisition conflicts with Create Payments Segregation of Duties High
Create Requisition conflicts with Create Suppliers Segregation of Duties High
Create Requisition conflicts with Purchase Orders Segregation of Duties Medium
Create Suppliers conflicts with Approve Invoices Segregation of Duties High
Create Suppliers conflicts with Approve Purchase Orders Segregation of Duties High
Create Suppliers conflicts with Create Payments Segregation of Duties High
Create Suppliers conflicts with Payables Invoices Segregation of Duties High
Create Suppliers conflicts with Purchase Orders Segregation of Duties High
Create Suppliers – Critical Access Least Privilege, Segregation of Duties High
Customer Account Maintenance conflicts with Create Invoice Segregation of Duties High
Customer Account Maintenance conflicts with Customer Credit Information Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Credit Memos Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Receipts Segregation of Duties High
Customer Account Maintenance conflicts with Receivables Transactions Segregation of Duties High
Customer Account Maintenance conflicts with Remittances Segregation of Duties High
Customer Account Maintenance – Critical Access Least Privilege, Segregation of Duties High
Development conflicts with Access Administration Segregation of Duties Critical
Development – Critical Access Least Privilege, Segregation of Duties Critical
Enter Debit Memo conflicts with Customer Receipts Segregation of Duties High
Enter Journal Entry conflicts with Approve Invoices Segregation of Duties High
Enter Journal Entry conflicts with Assets Depreciation Segregation of Duties High
Enter Journal Entry conflicts with Assets Workbench Segregation of Duties High
Enter Journal Entry conflicts with Capitalizing Assets Segregation of Duties High
Enter Journal Entry conflicts with Create Payments Segregation of Duties High
Enter Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Enter Journal Entry conflicts with Mass Allocate Journal Entries Segregation of Duties High
Enter Journal Entry conflicts with Payables Invoices Segregation of Duties High
Enter Journal Entry conflicts with Post Journal Entry Segregation of Duties High
Enter Journal Entry conflicts with Purchase Orders Segregation of Duties High
Enter Journal Entry conflicts with Receivables Receipts Segregation of Duties High
Enter Journal Entry conflicts with Remittances Segregation of Duties High
Enter Purchase Order Releases conflicts with Approve Invoices Segregation of Duties Medium
General Ledger Periods conflicts with Enter Journal Entry Segregation of Duties High
General Ledger Periods conflicts with General Ledger Setup Segregation of Duties High
General Ledger Periods conflicts with Post Journal Entry Segregation of Duties High
General Ledger Setup – Critical Access Least Privilege, Segregation of Duties High
General Ledger Setup Periods conflicts with Receivables Receipts Segregation of Duties High
Maintain HR Configuration conflicts with Payroll Maintenance Segregation of Duties High
Payables Invoice Hold Release conflicts with Create Suppliers Segregation of Duties High
Payables Invoices conflicts with Create Payments Segregation of Duties High
Payables Invoices conflicts with Payables Setup Segregation of Duties High
Payables Invoices conflicts with Purchase Orders Segregation of Duties High
Payables Invoices conflicts with Purchasing Setup Segregation of Duties High
Payables Periods conflicts with Create Payables Transactions Segregation of Duties High
Payables Setup – Critical Access Least Privilege, Segregation of Duties High
Post Journal Entry conflicts with Approve Invoices Segregation of Duties High
Post Journal Entry conflicts with Approve Purchase Orders Segregation of Duties High
Post Journal Entry conflicts with Assets Depreciation Segregation of Duties High
Post Journal Entry conflicts with Assets Workbench Segregation of Duties High
Post Journal Entry conflicts with Capitalizing Assets Segregation of Duties High
Post Journal Entry conflicts with Create Payments Segregation of Duties High
Post Journal Entry conflicts with General Ledger Setup Segregation of Duties High
Post Journal Entry conflicts with Mass Allocate Journal Entries Segregation of Duties High
Post Journal Entry conflicts with Payables Invoices Segregation of Duties High
Post Journal Entry conflicts with Receivables Receipts Segregation of Duties High
Post Journal Entry conflicts with Remittances Segregation of Duties High
Pricing Agreements conflicts with Receivables Receipts Segregation of Duties High
Pricing Agreements conflicts with Remittances Segregation of Duties High
Purchase Orders conflicts with Approve Invoices Segregation of Duties Medium
Purchase Orders conflicts with Payables Invoices Segregation of Duties High
Purchase Orders conflicts with Purchasing Setup Segregation of Duties High
Purchasing Setup conflicts with Payables Transactions Segregation of Duties High
Receivables Banks conflicts with Receivables Receipts Segregation of Duties High
Receivables Credit Memos conflicts with Receivables Receipts Segregation of Duties High
Receivables Receipts conflicts with Receivables Transactions Segregation of Duties High
Receivables Setup conflicts with Receivables Transactions Segregation of Duties High
Set Up Payment conflicts with Create Payments Segregation of Duties High