Your company data is your most valuable asset. It is one of the main reasons companies go live with a new ERP and are immediately exposed to internal fraud or the risk of breaking compliance.ĭon't be afraid to speak up if your team or IT partner suggest you go live with no access security policies. This feature is available to be enabled as standard for all Business Central customers in Business Central 2020 release wave 2 November (17. This feature is already available in the latest version. This culture of 'Not my data - not my business' is pervasive amongst consulting firms. Sales Price was new module introduced and it was replaced by old pricing capabilities. This happens when the project runs beyond schedule and is over budget, and the consulting company does not want to add more complexity to the project. Too often, I see implementations where all users have access to everything in the system, and the IT partner often advised the client to go live with no access policy in place. However, IT partners also have a role in this delicate phase. Lack of documented data access policy in the organization.Īll of the above suggests that access policy and segregation of duties is the client's responsibility. Process and access control are not part of the design process, as the team focuses only on functional design.Ĥ. Security design is often the IT team's responsibility, and users are not always aware of the company's access policies.ģ.

Users have a lot to work on during the implementation, and access control is always postponed to a later stage until it never gets done.Ģ. Access security is a low priority during the implementation. I have worked on many projects, and I spotted common reasons companies don't include access policies in the ERP implementation:ġ.

Why is such an important control tool missing from most ERP implementations? Partly, it's our fault:

Separation of Duties is a standard internal control to prevent fraud.

Dynamics business central pricing