Systems
SOD Check supports segregation of duties analysis for these systems.
Which systems does SOD Check support?
SOD Check supports segregation of duties analysis for these systems:
NetSuite, Workday, Zip, Coupa, Tipalti, Rippling, ADP, E*TRADE, Shareworks and Salesforce.
What does SOD Check look for in each system?
In every system, SOD Check looks for combinations of access that give one person too much control. What that means differs by system:
- NetSuite: roles and permissions that let one user both create and approve transactions.
- Workday: security groups and business process access that overlap in ways your controls do not allow.
- Zip: procurement and approval access across requesters, approvers and administrators.
- Coupa: spend, approval and supplier-setup access.
- Tipalti: payables, payee setup and payment approval access.
- Rippling: HR, payroll and administrator access.
- ADP: payroll processing and approval access.
- E*TRADE: equity plan administration and transaction access.
- Shareworks: equity administration and approval access.
- Salesforce: administrator, finance and approval access.
Your administrator runs user, role, permission and security group reports and uploads them to a secure folder. We never log in to your systems.
Can SOD Check review more than one system?
Yes. Start with one system and add others. Many finance steps run across systems and by hand. One system alone may not show the whole picture. We can review one system, conflicts across systems, work done outside systems, or all of these together. Each system needs its own completed SOD Check diagnostic first. A cross-system review is scoped separately. We set the scope with you for each engagement.
For example, someone could change employee pay details in an HR system such as Workday, Rippling, or ADP. The same person could post payroll journal entries in NetSuite. Neither system shows the full picture alone.
Single-system review.
Conflicts inside one system.
Cross-system review.
Conflicts that span two or more systems.
Manual-process review.
Responsibilities done outside systems, such as approvals on paper or by email.
Integrated review.
System access and manual work seen together.
We agree on the systems and processes with you before work starts. A single-system diagnostic does not cover every system by default.
Where do you start?
Start with the system that has the most risk to your business. See the individual system pages.