authorization review: 6 important tips from the field

Post on 22-Dec-2014

342 Views

Category:

Business

2 Downloads

Preview:

Click to see full reader

DESCRIPTION

The process of reviewing authorizations enables enterprises to verify that authorizations granted to employees are still valid. The process entails that a manager must go through each authorization allocated to each of his/her employees, and decide whether to remove or keep it. In some cases, the authorization review process ends after a single manager’s approval. In other cases, additional approval steps from senior management are required. At the end of the process, a list is produced of all the employees whose authorizations were not approved and will need to be removed. The authorization review process is required by SOX and equivalent regulations, so companies need to review their authorizations at least once a year. Many organizations perform these reviews twice a year or even quarterly, depending on legal obligations and the requirements of the company’s auditors. “Authorization Review” is also often called “Access Review” or the “Authorization Inspection” process.

TRANSCRIPT

Authorization Review: 6 Important Tips From The Field

Created by Xpandion

Author

Moshe Panzer

CEO, Xpandion

Tip #1: Prepare enough time in

advance.

The average time for the first implementation is

between twoweeks to three months,

depending on the number of systems, the

readiness of the databases and the organizational

culture.

Tip #1: Prepare enough time in advance.

Tip #2: Get top management support.

Higher management, like the CEO and CFO, must

support this process. Involve them to ensure a review that ends on time

andsuccessfully.

Tip #2: Get top management support.

Tip #3: Involve the auditor.

At the end of the day, the auditor is the real customer.

Include him as early as you can for professional guidance and to gain his confidence. The auditor could appoint a representative

to participate in statusmeetings, while the auditor

himself should attend executive meetings.

Tip #3: Involve the auditor.

Tip #4: Prepare proper infrastructure.

To keep the implementation process running swiftly and successfully, make sure to

prepare the proper infrastructure including

hardware, software, installations and allocation of authorizations

to all systems. Failing to do this could result in

delays and the authorization review could become

disqualified.

Tip #4: Prepare proper infrastructure.

Tip #5: Hold regular status meetings.

During the entire implementation process, until the end of the

review, hold progress meetings to discuss timetable and remaining

tasks. Schedule in enough time

dedicated to the authorization review and for applying any

relevant changes.

Tip #5: Hold regular status meetings.

Tip #6: Train the reviewers.

Organize a central meeting to train all relevant

managers on the authorization review tool

and increase their confidence in the process.

Professional training ensures high satisfaction

and fast authorization reviews.

Tip #6: Train the reviewers.

Click here for a demo

Get Xpandion’s software to ensure

ERP security & authorization compliance.

top related