Skip to content

Case study Financial services

How South African Bank created visibility into control process across organisation

One of South Africa's largest banks was checking transactions by hand, with segregation-of-duties issues identified and little reporting or visibility across the control process.

IndustryFinancial services
RegionHeadquartered in Johannesburg, with banking subsidiaries across Africa
SizeApproximately 6,000 employees; trades on the Johannesburg Securities Exchange
Primary ERPOracle E-Business Suite

Challenges

  • Segregation-of-duties issues identified
  • Manual process of checking transactions
  • Lack of reports and visibility

Results

  • Designed access controls to identify the risk of users holding both Create Supplier and Approve Invoices entitlements
  • Created continuous monitoring access control from the access design model, assigning incidents to investigators
  • Enabled the team to investigate access incidents and act to remediate them, with greater visibility into the control process across the organisation
  • Designed a transaction control to identify suspicious transactions in the procure-to-pay cycle
  • Automated the process across the organisation

See it on your ERP

A 30-minute walkthrough against the systems you actually run.

See how this model applies to the systems sitting inside your own estate.

Book a demo More case studies

What this story shows

  • Create Supplier and Approve Invoices can no longer sit with one person unnoticed
  • Access incidents are routed to investigators rather than found at review time
  • Suspicious procure-to-pay transactions are identified by a designed control