In this work program sample, we list general best-practice steps for the enterprise resource planning security process.

Sample steps include: identify and review users who have access to accounts payable (AP) general options, provide the report to the company’s internal audit team, verify if the access is appropriate, identify and review users who have access to establish business units, identify the permissions that have more than the required access, match these permissions to the operators, obtain password control for all users accessing AP and compare it to company standards, and obtain the policies and procedures to grant user access.