Skip to content

CS Professional · Artificial Intelligence, Data Analytics and Cyber Security - Laws and Practice · Enterprise Resource Management

Which control best addresses the ERP risk that a single employee in Mumbai could both create a vendor and approve payment to that vendor?

Segregation of duties through role-based access control is the best control. It ensures that vendor creation and payment approval rest with different users, preventing one person from committing and concealing fraud. Backups, firewalls and faster hardware do not resolve conflicting access rights.

  1. ADaily backup of the ERP database
  2. BSegregation of duties through role-based access controlCorrect
  3. CInstalling a firewall at the network perimeter
  4. DUpgrading to a faster server

Explanation

The risk is conflicting authority held by one user, which enables fraud. Role-based access with segregation of duties ensures creation and approval are done by different people. Backups, firewalls and faster servers do not address internal conflicts of authority.

Did you get it right without looking?

One question tells you little. A timed set on Enterprise Resource Management shows your real accuracy, how long you take and where you lose marks.

Practise Enterprise Resource ManagementFree diagnostic mock

More Enterprise Resource Management questions