IT General Controls & Master Data
Your system runs — but is its data clean, and is access controlled?
Before you trust a report, you must trust the system that produced it. seg-audit checks who has access, who can change master data, and whether customer, supplier, item and chart-of-account records are sound — because bad master data produces bad financials no matter how careful the accountant.
Reports in this section
Who can access your system, and with exactly what rights?
- Active users and their permission groups
- Last login date per user
- Broad administrative rights
A table of every user and what they can do, flagging rights beyond their role.
Owner — every excess permission is an open door.
Is there still an account for someone who left, or one shared by several people?
- Users with no recent activity
- Active accounts with no clear owner
- Concurrent login patterns
A list of accounts to disable immediately, with the reason for each.
Owner and IT — an instant, zero-cost fix.
Are you dealing with the same supplier under two names — and paying twice?
- Customer and supplier master records
- Name, tax-ID and bank-detail similarity
- Accounts linked to each party
A list of duplicate or partially matching records, ranked by transaction value.
CFO — duplication means double payment and misleading reports.
Are your items and accounts structured well enough to produce a sound report?
- Item records, categories and units
- Chart of accounts and its hierarchy
- Unused or duplicated accounts
A list of missing, duplicated or miscategorised items and accounts, with the reporting impact.
CFO — the foundation of any reliable cost or profitability report.
Who changed a supplier bank account, and when?
- Change log on customer and supplier records
- Payment and bank detail changes
- Price and credit limit changes
A chronological record of who changed what and when, flagging financially sensitive changes.
Owner — most fraud starts with a changed bank account number.