A state prepares for their CAFR audit with an IT controls review of their ERP system

Challenge

A state needed an IT controls review of their newly implemented Enterprise Resource Planning (ERP) system. The ERP system added complexities to the state’s IT controls related to finance, human resource management, and procurement. The state needed to use the IT control tests, workpapers, and reports when conducting the state’s Comprehensive Annual Financial Report (CAFR) due to the financial impacts of the system controls. 

Solution

BerryDunn’s government assurance team:

• Evaluated the division’s ERP operations and controls by reviewing documentation, conducting a physical walkthrough, and performing tests. 
• Provided a tailored approach to testing the ERP controls with expertise from our firm’s IT consultants and CPAs. 
• Documented all identified control vulnerabilities and provided recommendations for improvement.

Outcome

The results of the IT controls review provided the state with the necessary information to effectively increase controls for the state’s ERP system. BerryDunn’s report and workpapers helped the state auditor plan and conduct the state’s CAFR audit.