MASTER'S THESIS
ERP System: Implementation, Audit and
Control Risks
Supervisor: Professor Jean Charles
Clément
Prepared by: Borhen Habib Khatib
2009-2010
INSEEC MSc Program in Audit and Control Management
Abstract:
Organizations implement Enterprise Resource Planning (ERP)
Systems in order to address the problems pose by disparate applications within
functional areas and to achieve competitive advantages. ERP systems typically
provide elegant technological solutions for organizations information needs
through radical changes in information processing orientation. Due to the
robust nature of these applications and the changes associated with the
implementation, auditors may need to adjust the audit processes and procedures
when auditing in such an environment.
The aim of this study is to present phases of an ERP systems
implementation and its impact on audit process in an organization. The focus is
to identify different phases of the implementation and how auditor can manage
this change. The research is conducted during my training on AS-Solar France
and the samples consist in the implementation of different module in CEGID ERP
System.
Table of contents
1. Introduction
...............................................................................................................
6
2. ERP System
.................................................................................................................
8 2.1. What is an ERP System?
2.2. ERP System Integration
3. Implementation of ERP System 10
3.1. The architecture of ERP project
3.1.1. Change management
3.1.2. Technical structure
3.2. ERP implementation phases
............................................................... ......11
3.2.1. Launch phase 11
3.2.1.1. Build the project and release the means
3.2.1.2. Confirm the objectives and identify the open
questions
3.2.1.3. Initiate information systems mapping
3.2.2. Design phase
..............................................................................
14
3.2.2.1. Validate options and close open questions
3.2.2.2. Define scope and structures
3.2.2.3. Identify and address specific risks
3.2.2.4. Define strategy and technical means
3.2.3. Implementation of the solution
............................... 18
3.2.3.1. Coordinate sub-projects
3.2.3.2. Organize the deployment
3.2.3.2.1. A deployment plan
3.2.3.2.2. Deployment teams organization
3.2.3.2.3. Training
3.2.3.2.4. Anticipate actions
3.2.3.3. Upgrading existing repositories
3.2.4. Integration phase 20
3.2.4.1. Prepare toggle plan
3.2.4.2. Validate integration
3.2.5. Production phase 23
3.2.5.1. Prepare the structure
3.2.5.2. Simulate actual operation
4. ERP System: Audit and Control of Risks 24
4.1. Reasons for implementation of Audit and control ERP System
24
4.1.1. High risks
................................................................................................
24
4.1.2. Higher Levels of Regulation 24
4.1.3. Efforts to meet new regulatory requirements .......
26
|