Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Enterprise Resource Management

In an ERP system of a manufacturing company, a clerk who raises purchase orders is also able to approve the payment of the vendor invoices against those orders. Which ERP security control is specifically designed to prevent this situation?

Segregation of duties implemented through role-based access control prevents one user from both raising purchase orders and approving payments. By assigning incompatible functions to different roles, the ERP reduces fraud risk. Backups, load balancing and screen timeouts do not restrict conflicting authorisations.

  1. ASegregation of duties through role-based accessCorrect
  2. BNightly data backup scheduling
  3. CNetwork load balancing
  4. DScreen saver timeout settings

Explanation

Segregation of duties splits incompatible functions such as raising orders and approving payments between different roles, so one person cannot commit and conceal fraud. Backups, load balancing and screen timeouts do not address conflicting authorisations.

Did you get it right without looking?

One question tells you little. A timed set on Enterprise Resource Management shows your real accuracy, how long you take and where you lose marks.

More Enterprise Resource Management questions