Your next ERP audit starts on Monday. Do you have a work program, or a blank spreadsheet?
Building an ERP audit program from scratch takes days. You have to work out where each control sits in the system, which screen or transaction code to check, what evidence to request, and how to test the business processes running on top of it. Then the next client runs a different ERP and you start all over again.
The ERP Audit Program Bundle gives you three ready-made audit programs for the systems most organisations actually run. That’s 445 procedures, each one telling you what to test, why it matters, where to find it in the system and what evidence to collect.
Use it for internal audit reviews, external audit IT general controls (ITGC) work, consulting engagements, or a self-assessment before the auditors arrive.
What’s inside
1. SAP System Audit Program v1.0: 91 procedures, 13 sections
A full review of the SAP landscape, from the system settings up to the modern S/4HANA and Fiori environment.
- System configuration and security parameters
- User management, roles, profiles and authorisations
- Password and authentication controls
- Security audit log and event monitoring
- Change and transport management
- Batch jobs, interfaces, RFCs and connectivity
- Data and table access controls
- Privileged and standard SAP accounts
- Audit trail and evidence retention
- S/4HANA, Fiori and modern SAP landscapes
- Each section opens with an audit objective, and each test names the T-code or report to run
- Mapped to the SAP Security Baseline, ISO 27001:2022, COBIT 2019, NIST SP 800-53 and SOX ITGC
2. Microsoft Dynamics 365 Business Central Audit Program v1.0: 181 procedures, 23 sections
Covers both the IT controls and the finance processes in one workbook.
- IT audit (13 areas): governance, user and partner access, permission sets and segregation of duties (SoD), sign-in security, environments and extensions, APIs and Power Platform, Copilot and AI agents, audit logging, backup and data protection
- Business process (9 areas): GL and period close, procure-to-pay, order-to-cash, inventory, fixed assets, cash and bank, projects, tax and e-invoicing, and financial reporting
- 15 data analytics tests: duplicate payments, vendor–employee matches, journal entry testing, payments made after bank details were changed, and AI agent transactions
- For Business Central version 26 and later, Online and On-Premises, and checked against the October 2026 release
3. Sage 300 ERP Audit Program v1.0: 173 procedures, 22 sections
For Sage 300, formerly Sage Accpac, which is widely used by mid-sized organisations.
- IT audit: governance, user and privileged access, roles and SoD, passwords, change management, database security, backup and recovery, interfaces, audit logging and hosting
- Business process: GL and period close, procure-to-pay, order-to-cash, inventory, fixed assets, cash and bank, payroll interface, tax and multi-currency, and financial reporting
- 15 data analytics tests: including duplicate payments, vendor–employee matches, journal entry testing and Benford’s Law
Built for the way auditors actually work
The Business Central and Sage 300 workbooks include:
- Engagement Setup: switch procedures in or out of scope by module
- Drop-down results and risk ratings for every test
- A live dashboard of results by section
- A findings register with recommendations, owners and due dates
- A segregation of duties matrix
- An information request list you can send to the client on day one
Every procedure gives you the control objective, the risk, where to look in the system and the evidence to collect. Junior staff can follow it, and seniors can review the work against it.
Why this bundle?
- One purchase covers three ERPs. Whichever system your next client or business unit runs, you’re ready.
- 445 procedures you don’t have to write. That saves days of preparation on every engagement.
- IT and business process together. You get access and system controls alongside the finance processes and data analytics, so it’s a complete ERP audit, not just a checklist.
- Mapped to recognised frameworks. ISO 27001, COBIT, NIST and SOX ITGC references support your audit methodology.
- Editable Excel. Add your own procedures, rebrand it for your firm and reuse it every year.
Who it’s for
- IT auditors and IT audit managers
- Internal audit departments in organisations that run SAP, Business Central or Sage 300
- External audit and consulting firms doing ITGC and ERP reviews
- SAP security and ERP support teams preparing for an audit
- Finance teams and CFOs who want to self-assess before the auditors arrive
Please note
These audit programs are professional working tools to support your audit, and they don’t replace professional judgement. Adapt the procedures to your scope, the system version you’re auditing and your own methodology. SAP, Microsoft Dynamics 365 Business Central and Sage 300 are trademarks of their respective owners, and Eunoia Consultants is not affiliated with them.
Reviews
There are no reviews yet.