In present Global supplier master data maintenance in the system has been granted only to Global Procurement team.
However, once the Supplier onboarding and assurance executive update / amend supplier master data those will be available in the production prior any review / authorization granted.
This has been identified as a risk (ICRAP01 – Supplier Master Data) by Global Internal Audit team and we were requested to mitigate / minimize this risk by authorizing supplier master data prior release into production.
Situation:
In current process or system, we do not have a proper control to facilitate the above request by mitigating / minimizing the risk associated with supplier master data maintenance (create / amend).
Requested Resolution:
Once the Supplier onboarding and assurance executive create / modify supplier master data record should change into a “preliminary status” to check by another Supplier onboarding and assurance executive (preferably by a supervisor / Manager) and if the information updated are satisfied they should be able to make the supplier record available in production for payment.
What is the Best way to address this ?
01- I Dont think we have this functionality whitin IFS
02- If we planned for a modification , what is the Best way ?