Home
> Uncategorized > New Protiviti tool for automated control optimization
New Protiviti tool for automated control optimization
I just heard today that Protiviti has a great tool for the SAP environment that should be of tremendous value to IT auditors and others.
I don’t know what they call it and haven’t seen it myself, but what they told me is that you can use it to analyze all your configurable controls. You can see which are turned on, and which are not.
This can be used to:
- Build an inventory of the automated controls you want to test. For example, we would use SAP BusinessObjects Process Control to monitor and test the configurations
- See where additional configurable controls can be turned on, and potentially replace less efficient/effective manual controls
- Get your continuous monitoring/auditing program going
If your company decides to assess and use the tool, I would be interested in hearing about it!
Leave a Reply
Share this blog
Recent Posts on Norman’s IIA Blog
- Excellent Advice on Risk Oversight May 20, 2013
- Deloitte Takes a Highly Intelligent Approach to Risk Management May 3, 2013
- Gartner Points to Failures to Obtain Value From Technology April 29, 2013
- The Important Risks That Are Overlooked but Should Come First April 23, 2013
- Technology is Too Important to Leave to IT April 23, 2013
- Does It Make Sense to Discuss GRC? April 23, 2013
- Risk-Based Audit Opinions That Matter April 8, 2013
- Deloitte Discusses Disruptive Technology April 1, 2013
- The Path to Excellence for Internal Audit March 26, 2013
- PwC Issues State of the Internal Audit Profession 2013 March 26, 2013
Norman, your blog popped up on my Google Alert today. The tool that Protiviti uses to analyze controls within SAP is called Assure Controls.
Protiviti also has a tool called Assure Security which performs automated analysis of segregation of duties risks within SAP. This tool is great for remediating excessive access, within users and roles, for upcoming audits.
Here’s a little more information about Protiviti’s Assure suite. We have been using it on hundreds of client engagements for nearly 6 years now. The Assure suite consists of:
Assure Controls – Performs configuration controls analysis and provides
recommendations
Assure Security – Performs segregation of duties (SOD) and sensitive
access checks
Assure Integrity – Analyzes transactional data for inconsistencies
(duplicate vendors, duplicate payments, fraudulent transactions)
Thanks,
Scott Gracyalny
Managing Director, Protiviti
http://www.protiviti.com