ERP systems aim to integrate business processes and information flows across an organization. They can streamline operations and decision making but also carry risks. The document outlines some key risks in ERP implementation projects including a mismatch between management goals and organizational readiness for change. It discusses the need to carefully examine process integrity, application security, infrastructure integrity and implementation integrity according to frameworks like COBIT. Successful ERP projects require thorough planning, analysis, configuration and testing as well as training and support.
In this document
Powered by AI
Introduction to risks in ERP implementation and importance of accuracy in the process.
ERP integrates information technology and business applications, enhancing operational efficiency and decision support across various functional areas.
ERP closely aligns with business process reengineering, requiring organizational resilience and an understanding of management expectations.
Centralized databases enable real-time processing. Security controls and potential vulnerabilities must be managed carefully.
Focus on process integrity, application security, project planning, and comprehensive training as critical components of successful ERP implementation.
Introduction to the COBIT framework, emphasizing governance and management practices in IT and business alignment.
Risk in ERPImplementation Projects
Working Effectively and Accurately
Amarnath Gupta
Principal Consultant
2.
ERP is great
A high-end solution featuring integration of
information technology and business application.
Seeks to streamline and integrate operational
processes and information flows in the organization
to integrate the resources.
The whole is greater than the sum of its parts.
Each implementation is unique and is designed to
correspond to the implementer's various business
processes
3.
Why an ERP
Bridges the information gap across the organization.
Facilitates enterprise-wide Integrated Information System covering
all functional areas like Manufacturing, Sales and
distribution, Payables, Receivables, Inventory, Accounts, Human
resources, Purchases etc.
Helps in eliminating most of the business problems like Material
shortages, Productivity enhancements, Customer service, Cash
Management, Inventory problems, Quality problems, Prompt delivery
etc.
Provides avenues of continuous improvement and refinement of
business processes.
Helps in laying down Decision Support Systems (DSS), Management
Information System (MIS), Reporting, Data Mining and Early Warning
Systems to the organization.
4.
ERP and BusinessProcess Reengineering
Implementation goes
closely with business
process reengineering
and organizational
remodeling
Understanding the full
import of going for ERP;
whether enough
organizational resilience
and flexibility to undertake
the project.
Mismatch between the
management aspirations
and organizational
compliance.
5.
Characteristics of anERP System
The database is usually centralized and as the
applications reside on multiple users the system allows
flexibility in customization and configuration.
The processing is real time online whereby the
databases are updated simultaneously by minimal data
entry operations.
The input controls are dependent on pre data acceptance
validation and rely on transaction balancing; time tested
controls such are batch totals etc. are often no longer
relevant.
Since the transactions are stored in a common database
the different modules update entries into the database.
Thus database is accessible from different modules.
6.
Characteristics of anERP System
The authorization controls ere enforced at the level
of application and not the database; the security
control evaluation is of paramount importance.
Auditors have to spend considerable time
understanding the data flow and transaction
processing.
System heavily dependent on networking on a large
scale.
Vulnerability by increased access is a price that is
paid for higher integration and faster processing of
data in an integrated manner.
The risk of single point failures is higher in ERP
solutions; Business Continuity and Disaster
Recovery should be examined closely.
7.
Broader span tolook in:
Process integrity,
Application security,
Infrastructure integrity and
Implementation integrity.
8.
Have a lookin Integration Integrity
Project Planning.
Business & Operational analysis including Gap analysis.
Business Process Reengineering.
Installation and configuration.
Project team training.
Business Requirement mapping.
Module configuration.
System interfaces.
Data conversion.
Custom Documentation.
End-user training.
Acceptance testing and
Post implementation/Audit support.