Microsoft Dynamics 365 Finance & Supply Chain Security - 4 Week Assessment

Robust Security Design is a key factor when it comes to ensuring compliance – and keeping auditors happy. As auditors continue to increase scrutiny of Segregation of Duties (SoD) and Sensitive Access risks, it is important that organizations implement a strong application security design to meet compliance requirements.

Protiviti has been consistently delivering on Security and Compliance solutions within Microsoft Dynamics 365. With our extensive background in Internal Audit, we are experts in developing and maintaining an integral and conflict-free security design of the Dynamics 365 Finance and Supply Chain environment.

We provide Segregation of Duties and Security Access, enabling organizations to identify and mitigate the associated risks. We also provide further understanding of the overall security within the Microsoft Dynamics 365 system.

Assessment Objectives:

• Define the organization’s Segregation of Duties (SoD) and Sensitive Access ruleset which will serve as the foundation of the security assessment
• Define a risk-ranking framework to ensure all stakeholders are aligned on risk levels and definitions within Dynamics 365
• Identify and document mitigating controls for all high-risk user SoD conflicts resulting from required role combinations

Activities to be completed:

• Receive and input data into Protiviti Fastpath tool
• Gain a quick understanding of the client's Dynamics 365 Finance and Supply Chain environment
• Perform SoD and Sensitive Access analysis
• Validate findings with the team
• Present observations and recommendations

Deliverables:

• A SoD and Sensitive Analysis of Dynamics 365 Finance and Supply Chain Security Access
• Executive summary readout with observations and recommendations
• Roadmap detailing next steps

*The cost associated with the activity is highly dependent on number of users and roles and can only be truly determined on case-to-case basis.