In this workshop, we identified SOD issues with a practical example.
This live in-person workshop was organised by Belgian chapter of the IIA on November 19th 2021.
What was the workshop about?
SoD, or segregation of duties, is a well-known concept. But how do you verify that this concept is indeed properly configured in the CRM system or other tools? In short, how do you identify SoD issues?
Did you miss this workshop?
Not to worry, this use case takes you through all the steps to evaluate the SoD configuration. Also, please feel free to contact us for more details or an online session.
Using a specialised data analysis tool (Arbutus Analyzer), we demonstrate how to identify SoD issues.
We take you through all the steps of analysing the permissions as configured for hundreds of users by comparing those with a list of combinations that are not be allowed.
By way of deliverable, we create a detailed report that documents those SoD transgressions per user.
As a bonus, we illustrate how the return on investment can be increased by scheduling this test on a weekly basis to alert local managers so they can take prompt action; in effect turning the audit effort into an effective continuous monitoring system.
Why attend?
Those that need to identify segregation of duties problems, or access control in general will surely find this workshop interesting indeed. Equally, auditors who are interested in data analytics in general, or who are exploring the landscape for ideas and tools will find value in the presentation and approach.
In addition, after the workshop we can arrange for you to have access to the same data analysis software with a temporary license.
Oh, and did we mention?
A sandwich lunch is included, so indeed there is such a thing as a free lunch!
Also 1 CPE credit will be awarded for attending this workshop.
Practical details
When?
Friday 19th of November 2021, 12:00 to 13:30
Where?
The workshop will be held at the offices of IIA Belgium.
What does it cost?
This is a free workshop.
There is no charge; so you only invest your lunchtime.
Still, you must register beforehand!
Who is the speaker?
The host will be Alain Rousseau; the driving force behind Sepia Solutions. He has focussed on audit software tools since 2007 and implemented data analysis tools (Arbutus Analyzer, ACL) and audit management tools (PAWS, Pentana Audit) at dozens of audit departments.
With an education and background that is both technical (industrial engineer) and business (MBA), Alain is the ideal interface between business users and software developers. His in-depth understanding of the software packages and a firm understanding of the audit profession also makes him an excellent trainer and consultant for these software packages.
As part of the IIA’s Master Class Internal Audit Essentials, he recently wrote a paper discussing the effect of audit software on meeting the IIA’s IPPF standards.
Registration details – Registrations closed
Did you miss the workshop but are you still interested in the use case?
Good news then! This use case is fully documented here:
Identify SoD issues with data analysis
In this use case, we illustrate step by step how you can identify SOD issues using Arbutus Analyzer (a versatile data analytics tool). [read more]
