Risk in ERP Implementation Projects


            Working Effectively and Accurately

                                     Amarnath Gupta
                                 Principal Consultant
ERP is great
   A high-end solution featuring integration of
    information technology and business application.
   Seeks to streamline and integrate operational
    processes and information flows in the organization
    to integrate the resources.
   The whole is greater than the sum of its parts.
   Each implementation is unique and is designed to
    correspond to the implementer's various business
    processes
Why an ERP
   Bridges the information gap across the organization.

   Facilitates enterprise-wide Integrated Information System covering
    all functional areas like Manufacturing, Sales and
    distribution, Payables, Receivables, Inventory, Accounts, Human
    resources, Purchases etc.

   Helps in eliminating most of the business problems like Material
    shortages, Productivity enhancements, Customer service, Cash
    Management, Inventory problems, Quality problems, Prompt delivery
    etc.

   Provides avenues of continuous improvement and refinement of
    business processes.

   Helps in laying down Decision Support Systems (DSS), Management
    Information System (MIS), Reporting, Data Mining and Early Warning
    Systems to the organization.
ERP and Business Process Reengineering
   Implementation         goes
    closely with business
    process        reengineering
    and           organizational
    remodeling
   Understanding the full
    import of going for ERP;
    whether              enough
    organizational resilience
    and flexibility to undertake
    the project.
   Mismatch between the
    management aspirations
    and           organizational
    compliance.
Characteristics of an ERP System
   The database is usually centralized and as the
    applications reside on multiple users the system allows
    flexibility in customization and configuration.
   The processing is real time online whereby the
    databases are updated simultaneously by minimal data
    entry operations.
   The input controls are dependent on pre data acceptance
    validation and rely on transaction balancing; time tested
    controls such are batch totals etc. are often no longer
    relevant.
   Since the transactions are stored in a common database
    the different modules update entries into the database.
    Thus database is accessible from different modules.
Characteristics of an ERP System
   The authorization controls ere enforced at the level
    of application and not the database; the security
    control evaluation is of paramount importance.
   Auditors have to spend considerable time
    understanding the data flow and transaction
    processing.
   System heavily dependent on networking on a large
    scale.
   Vulnerability by increased access is a price that is
    paid for higher integration and faster processing of
    data in an integrated manner.
   The risk of single point failures is higher in ERP
    solutions; Business Continuity and Disaster
    Recovery should be examined closely.
Broader span to look in:
   Process integrity,
   Application security,
   Infrastructure integrity and
   Implementation integrity.
Have a look in Integration Integrity
   Project Planning.
   Business & Operational analysis including Gap analysis.
   Business Process Reengineering.
   Installation and configuration.
   Project team training.
   Business Requirement mapping.
   Module configuration.
   System interfaces.
   Data conversion.
   Custom Documentation.
   End-user training.
   Acceptance testing and
   Post implementation/Audit support.
COBIT Framework
COBIT Framework Version 5.0

Risk In Erp Implementation Projects

  • 1.
    Risk in ERPImplementation Projects Working Effectively and Accurately Amarnath Gupta Principal Consultant
  • 2.
    ERP is great  A high-end solution featuring integration of information technology and business application.  Seeks to streamline and integrate operational processes and information flows in the organization to integrate the resources.  The whole is greater than the sum of its parts.  Each implementation is unique and is designed to correspond to the implementer's various business processes
  • 3.
    Why an ERP  Bridges the information gap across the organization.  Facilitates enterprise-wide Integrated Information System covering all functional areas like Manufacturing, Sales and distribution, Payables, Receivables, Inventory, Accounts, Human resources, Purchases etc.  Helps in eliminating most of the business problems like Material shortages, Productivity enhancements, Customer service, Cash Management, Inventory problems, Quality problems, Prompt delivery etc.  Provides avenues of continuous improvement and refinement of business processes.  Helps in laying down Decision Support Systems (DSS), Management Information System (MIS), Reporting, Data Mining and Early Warning Systems to the organization.
  • 4.
    ERP and BusinessProcess Reengineering  Implementation goes closely with business process reengineering and organizational remodeling  Understanding the full import of going for ERP; whether enough organizational resilience and flexibility to undertake the project.  Mismatch between the management aspirations and organizational compliance.
  • 5.
    Characteristics of anERP System  The database is usually centralized and as the applications reside on multiple users the system allows flexibility in customization and configuration.  The processing is real time online whereby the databases are updated simultaneously by minimal data entry operations.  The input controls are dependent on pre data acceptance validation and rely on transaction balancing; time tested controls such are batch totals etc. are often no longer relevant.  Since the transactions are stored in a common database the different modules update entries into the database. Thus database is accessible from different modules.
  • 6.
    Characteristics of anERP System  The authorization controls ere enforced at the level of application and not the database; the security control evaluation is of paramount importance.  Auditors have to spend considerable time understanding the data flow and transaction processing.  System heavily dependent on networking on a large scale.  Vulnerability by increased access is a price that is paid for higher integration and faster processing of data in an integrated manner.  The risk of single point failures is higher in ERP solutions; Business Continuity and Disaster Recovery should be examined closely.
  • 7.
    Broader span tolook in:  Process integrity,  Application security,  Infrastructure integrity and  Implementation integrity.
  • 8.
    Have a lookin Integration Integrity  Project Planning.  Business & Operational analysis including Gap analysis.  Business Process Reengineering.  Installation and configuration.  Project team training.  Business Requirement mapping.  Module configuration.  System interfaces.  Data conversion.  Custom Documentation.  End-user training.  Acceptance testing and  Post implementation/Audit support.
  • 9.
  • 10.